auth-cloudflare 0.0.1

auth-cloudflare: Cloudflare Workers AI auth provider core - account/token resolution, model catalog types, cache paths.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132

//! Integration tests for the PUBLIC tool-loop validators - the pure,
//! deterministic acceptance machinery behind the multi-turn conformance
//! harness (feedback 02 suite 40). Zero network: no model is called; only
//! the ordering, duplicate, argument-schema, and schema-generation checks
//! are exercised with synthetic observations.

use auth_cloudflare::tool_loop::{all_arguments_valid, find_duplicates, tool_schemas, validate_ordering};
use auth_cloudflare::ToolCallObservation;

fn obs(name: &str, arguments: serde_json::Value, turn: u32) -> ToolCallObservation {
	ToolCallObservation { name: name.to_string(), arguments, turn }
}

#[test]
fn ordering_accepts_read_run_write() {
	let calls = vec![
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 1),
		obs("run_fixture_test", serde_json::json!({"fixture_id": "calc"}), 2),
		obs(
			"write_fixture_patch",
			serde_json::json!({"fixture_id": "calc", "patch": "fix the off-by-one"}),
			3,
		),
	];
	assert!(validate_ordering(&calls));
}

#[test]
fn ordering_rejects_write_first_and_read_after_run() {
	let write_first = vec![
		obs(
			"write_fixture_patch",
			serde_json::json!({"fixture_id": "calc", "patch": "fix"}),
			1,
		),
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 2),
		obs("run_fixture_test", serde_json::json!({"fixture_id": "calc"}), 3),
	];
	assert!(!validate_ordering(&write_first), "writing before reading is a violation");

	let read_after_run = vec![
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 1),
		obs("run_fixture_test", serde_json::json!({"fixture_id": "calc"}), 2),
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 3),
	];
	assert!(!validate_ordering(&read_after_run), "re-reading after a run is a violation");
}

#[test]
fn duplicates_are_detected_on_repeated_identical_calls() {
	let repeated_read = vec![
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 1),
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 2),
	];
	let duplicates = find_duplicates(&repeated_read);
	assert_eq!(duplicates.len(), 1);
	assert_eq!(duplicates[0].name, "read_fixture");
	assert_eq!(duplicates[0].turn, 2);

	// Same tool, different arguments: NOT a duplicate.
	let different_args = vec![
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 1),
		obs("read_fixture", serde_json::json!({"fixture_id": "greeter"}), 1),
	];
	assert!(find_duplicates(&different_args).is_empty());
}

#[test]
fn arguments_accept_conformant_calls() {
	let calls = vec![
		obs("read_fixture", serde_json::json!({"fixture_id": "calc"}), 1),
		obs("run_fixture_test", serde_json::json!({"fixture_id": "greeter"}), 2),
		obs(
			"write_fixture_patch",
			serde_json::json!({"fixture_id": "calc", "patch": "fix add"}),
			3,
		),
	];
	assert!(all_arguments_valid(&calls));
}

#[test]
fn arguments_reject_missing_required_fields() {
	assert!(!all_arguments_valid(&[obs("read_fixture", serde_json::json!({}), 1)]));
	assert!(!all_arguments_valid(&[obs(
		"write_fixture_patch",
		serde_json::json!({"fixture_id": "calc"}),
		1
	)]));
}

#[test]
fn arguments_reject_wrong_enum_value() {
	assert!(!all_arguments_valid(&[obs(
		"read_fixture",
		serde_json::json!({"fixture_id": "nope"}),
		1
	)]));
}

#[test]
fn arguments_reject_extra_properties() {
	// additionalProperties: false must be respected.
	assert!(!all_arguments_valid(&[obs(
		"read_fixture",
		serde_json::json!({"fixture_id": "calc", "extra": 1}),
		1
	)]));
}

#[test]
fn tool_schemas_are_three_and_reject_extra_properties() {
	let schemas = tool_schemas();
	assert_eq!(schemas.len(), 3);
	let names: Vec<&str> = schemas
		.iter()
		.map(|schema| schema["function"]["name"].as_str().expect("schema names a tool"))
		.collect();
	assert_eq!(names, vec!["read_fixture", "run_fixture_test", "write_fixture_patch"]);
	for schema in &schemas {
		assert_eq!(schema["type"], "function");
		assert_eq!(
			schema["function"]["parameters"]["additionalProperties"].as_bool(),
			Some(false),
			"every tool schema must forbid extra properties"
		);
		let required = schema["function"]["parameters"]["required"]
			.as_array()
			.expect("required present");
		assert!(!required.is_empty());
	}
}