107 lines
3.7 KiB
Python
107 lines
3.7 KiB
Python
|
from pathlib import Path
|
||
|
|
from tempfile import TemporaryDirectory
|
||
|
|
import unittest
|
||
|
|
|
||
|
|
import yaml
|
||
|
|
|
||
|
|
from tools import check_layer_conformance as layer
|
||
|
|
|
||
|
|
|
||
|
|
INTENT = """---
|
||
|
|
layer: Engine
|
||
|
|
role: PIP
|
||
|
|
standard: netkingdom-security-layer-model
|
||
|
|
standard_version: "0.7"
|
||
|
|
---
|
||
|
|
|
||
|
|
# INTENT
|
||
|
|
"""
|
||
|
|
|
||
|
|
DECL = {
|
||
|
|
"layer": "engine",
|
||
|
|
"role": "pip",
|
||
|
|
"repository": "zone-engine",
|
||
|
|
"standard_version": "0.7",
|
||
|
|
"tooling_contacts": [],
|
||
|
|
"unowned_capabilities": [],
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
def _write_tree(root: Path, *, decl=None, intent=None, tools=None) -> None:
|
||
|
|
(root / "layer.yaml").write_text(yaml.safe_dump(decl if decl is not None else DECL))
|
||
|
|
(root / "INTENT.md").write_text(intent if intent is not None else INTENT)
|
||
|
|
tools_dir = root / "tools"
|
||
|
|
tools_dir.mkdir()
|
||
|
|
(tools_dir / "noop.py").write_text("import json\n")
|
||
|
|
if tools:
|
||
|
|
for name, body in tools.items():
|
||
|
|
(tools_dir / name).write_text(body)
|
||
|
|
|
||
|
|
|
||
|
|
class LayerDeclarationTest(unittest.TestCase):
|
||
|
|
def test_declaration_exists_and_matches_intent(self):
|
||
|
|
decl = yaml.safe_load(layer.DECL.read_text())
|
||
|
|
intent = layer.load_intent()
|
||
|
|
self.assertEqual(decl["repository"], "zone-engine")
|
||
|
|
self.assertEqual(decl["layer"], "engine")
|
||
|
|
self.assertEqual(decl["role"], "pip")
|
||
|
|
self.assertEqual(decl["standard_version"], "0.7")
|
||
|
|
self.assertEqual(decl["tooling_contacts"], [])
|
||
|
|
self.assertIsNone(decl.get("pep_stance"))
|
||
|
|
self.assertEqual(intent["layer"].lower(), "engine")
|
||
|
|
self.assertEqual(intent["role"].lower(), "pip")
|
||
|
|
self.assertEqual(layer.check_declaration_agrees(decl, intent), [])
|
||
|
|
|
||
|
|
def test_checker_passes_on_the_real_tree(self):
|
||
|
|
code, errors, _reports = layer.evaluate()
|
||
|
|
self.assertEqual(code, 0, errors)
|
||
|
|
self.assertEqual(errors, [])
|
||
|
|
|
||
|
|
|
||
|
|
class LayerCheckerFailureTest(unittest.TestCase):
|
||
|
|
def test_missing_declaration_is_exit_2(self):
|
||
|
|
with TemporaryDirectory() as directory:
|
||
|
|
root = Path(directory)
|
||
|
|
(root / "INTENT.md").write_text(INTENT)
|
||
|
|
(root / "tools").mkdir()
|
||
|
|
code, errors, _ = layer.evaluate(root=root)
|
||
|
|
self.assertEqual(code, 2)
|
||
|
|
self.assertTrue(any("no declaration" in item for item in errors))
|
||
|
|
|
||
|
|
def test_intent_disagreement_is_exit_2(self):
|
||
|
|
with TemporaryDirectory() as directory:
|
||
|
|
root = Path(directory)
|
||
|
|
_write_tree(root, intent=INTENT.replace("Engine", "Staff").replace("PIP", "null"))
|
||
|
|
code, errors, _ = layer.evaluate(root=root)
|
||
|
|
self.assertEqual(code, 2)
|
||
|
|
self.assertTrue(any("disagrees" in item for item in errors))
|
||
|
|
|
||
|
|
def test_undeclared_tooling_client_is_exit_1(self):
|
||
|
|
with TemporaryDirectory() as directory:
|
||
|
|
root = Path(directory)
|
||
|
|
_write_tree(root, tools={"vault.py": "import hvac\n\nclient = hvac.Client()\n"})
|
||
|
|
code, errors, _ = layer.evaluate(root=root)
|
||
|
|
self.assertEqual(code, 1)
|
||
|
|
self.assertTrue(any("hvac" in item for item in errors))
|
||
|
|
|
||
|
|
def test_http_decision_surface_is_exit_1(self):
|
||
|
|
with TemporaryDirectory() as directory:
|
||
|
|
root = Path(directory)
|
||
|
|
_write_tree(
|
||
|
|
root,
|
||
|
|
tools={
|
||
|
|
"api.py": (
|
||
|
|
"import fastapi\n\n"
|
||
|
|
"app = fastapi.FastAPI()\n\n"
|
||
|
|
"@app.post('/v1/check')\n"
|
||
|
|
"def check():\n"
|
||
|
|
" return {'allow': True}\n"
|
||
|
|
)
|
||
|
|
},
|
||
|
|
)
|
||
|
|
code, errors, _ = layer.evaluate(root=root)
|
||
|
|
self.assertEqual(code, 1)
|
||
|
|
joined = "\n".join(errors)
|
||
|
|
self.assertIn("fastapi", joined)
|
||
|
|
self.assertIn("/v1/check", joined)
|