148 lines
4.5 KiB
Python
148 lines
4.5 KiB
Python
from __future__ import annotations
|
|
|
|
import json
|
|
import os
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
from letta_support import (
|
|
ElydoraApiHandler,
|
|
assert_managed_triple,
|
|
official_input,
|
|
prepare_fixture,
|
|
run_handler,
|
|
server_base_url,
|
|
start_api_server,
|
|
)
|
|
|
|
|
|
def _payload(value: object) -> bytes:
|
|
return json.dumps(value).encode()
|
|
|
|
|
|
def test_guard_accepts_active_agents_with_native_exit_semantics(
|
|
monkeypatch: pytest.MonkeyPatch, tmp_path: Path
|
|
) -> None:
|
|
server = start_api_server(status="active")
|
|
fixture = prepare_fixture(
|
|
monkeypatch, tmp_path, base_url=server_base_url(server)
|
|
)
|
|
try:
|
|
fixture.install()
|
|
guard = assert_managed_triple(fixture.settings())["guard"]
|
|
result = run_handler(
|
|
guard,
|
|
_payload(official_input(fixture, "PreToolUse")),
|
|
fixture,
|
|
)
|
|
assert result.returncode == 0, result.stderr
|
|
assert result.stdout == b""
|
|
assert len([
|
|
request for request in ElydoraApiHandler.requests
|
|
if request["method"] == "GET"
|
|
]) == 1
|
|
finally:
|
|
server.shutdown()
|
|
server.server_close()
|
|
|
|
|
|
@pytest.mark.parametrize("status", ["frozen", "revoked"])
|
|
def test_guard_propagates_blocking_states_through_exit_code_two(
|
|
monkeypatch: pytest.MonkeyPatch, tmp_path: Path, status: str
|
|
) -> None:
|
|
server = start_api_server(status=status)
|
|
fixture = prepare_fixture(
|
|
monkeypatch, tmp_path, base_url=server_base_url(server)
|
|
)
|
|
try:
|
|
fixture.install()
|
|
guard = assert_managed_triple(fixture.settings())["guard"]
|
|
result = run_handler(
|
|
guard,
|
|
_payload(official_input(fixture, "PreToolUse")),
|
|
fixture,
|
|
)
|
|
assert result.returncode == 2, result.stderr
|
|
assert result.stdout == b""
|
|
assert status.encode() in result.stderr.lower()
|
|
finally:
|
|
server.shutdown()
|
|
server.server_close()
|
|
|
|
|
|
def test_audit_forwards_complete_success_and_failure_payloads(
|
|
monkeypatch: pytest.MonkeyPatch, tmp_path: Path
|
|
) -> None:
|
|
server = start_api_server()
|
|
fixture = prepare_fixture(
|
|
monkeypatch, tmp_path, base_url=server_base_url(server)
|
|
)
|
|
try:
|
|
fixture.install()
|
|
handlers = assert_managed_triple(fixture.settings())
|
|
for handler_name, event in (
|
|
("audit", "PostToolUse"),
|
|
("failure", "PostToolUseFailure"),
|
|
):
|
|
payload = {
|
|
**official_input(fixture, event),
|
|
"future_provider_field": {"preserved": True},
|
|
}
|
|
result = run_handler(
|
|
handlers[handler_name], _payload(payload), fixture
|
|
)
|
|
assert result.returncode == 0, result.stderr
|
|
assert result.stdout == b""
|
|
posts = [
|
|
request for request in ElydoraApiHandler.requests
|
|
if request["method"] == "POST"
|
|
]
|
|
assert len(posts) == 2
|
|
assert posts[0]["json"]["payload"] == {
|
|
**official_input(fixture, "PostToolUse"),
|
|
"future_provider_field": {"preserved": True},
|
|
}
|
|
assert posts[1]["json"]["payload"] == {
|
|
**official_input(fixture, "PostToolUseFailure"),
|
|
"future_provider_field": {"preserved": True},
|
|
}
|
|
finally:
|
|
server.shutdown()
|
|
server.server_close()
|
|
|
|
|
|
def test_audit_failure_is_observable_and_fails_closed(
|
|
monkeypatch: pytest.MonkeyPatch, tmp_path: Path
|
|
) -> None:
|
|
fixture = prepare_fixture(monkeypatch, tmp_path)
|
|
fixture.install()
|
|
audit = assert_managed_triple(fixture.settings())["audit"]
|
|
result = run_handler(
|
|
audit,
|
|
_payload(official_input(fixture, "PostToolUse")),
|
|
fixture,
|
|
)
|
|
assert result.returncode == 1
|
|
assert b"Elydora audit" in result.stderr
|
|
error_log = fixture.agent_dir / "error.log"
|
|
source = error_log.read_text(encoding="utf-8")
|
|
assert "[elydora-hook]" in source
|
|
assert "URLError" in source
|
|
|
|
|
|
@pytest.mark.skipif(os.name == "nt", reason="POSIX mode bits apply on Unix")
|
|
def test_runtime_artifacts_use_private_modes(
|
|
monkeypatch: pytest.MonkeyPatch, tmp_path: Path
|
|
) -> None:
|
|
fixture = prepare_fixture(monkeypatch, tmp_path)
|
|
fixture.install()
|
|
for file_path, expected in (
|
|
(fixture.runtime_config_path, 0o600),
|
|
(fixture.private_key_path, 0o600),
|
|
(fixture.guard_path, 0o700),
|
|
(fixture.audit_path, 0o700),
|
|
(fixture.global_path, 0o600),
|
|
):
|
|
assert file_path.stat().st_mode & 0o777 == expected
|