harn-vm 0.10.40

Async bytecode virtual machine for the Harn programming language
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97

//! Provider endpoint resolution and ephemeral runtime-route override tests.

use super::*;

fn reset_overrides() {
    clear_user_overrides();
    clear_runtime_provider_endpoint_overrides();
}

#[test]
fn test_resolve_base_url_no_env() {
    let pdef = ProviderDef {
        base_url: "https://example.com".to_string(),
        ..Default::default()
    };
    assert_eq!(resolve_base_url(&pdef), "https://example.com");
}

#[test]
fn test_runtime_provider_endpoint_requires_named_absolute_http_url() {
    assert!(RuntimeProviderEndpointOverrides::single("", "https://verified.example/v1").is_err());
    assert!(RuntimeProviderEndpointOverrides::single("fixture", "not-a-url").is_err());
    assert!(RuntimeProviderEndpointOverrides::single("fixture", "file:///tmp/llm").is_err());
    assert!(
        RuntimeProviderEndpointOverrides::single("fixture", " https://verified.example/v1 ")
            .is_ok()
    );
}

#[test]
fn test_runtime_provider_endpoint_wins_over_ambient_endpoint_env() {
    let _guard = crate::llm::env_guard();
    unsafe {
        std::env::set_var("HARN_TEST_RUNTIME_ENDPOINT", "https://ambient.example/v1");
    }
    let mut config = ProvidersConfig::default();
    config.providers.insert(
        "fixture".to_string(),
        ProviderDef {
            base_url: "https://catalog.example/v1".to_string(),
            base_url_env: Some("HARN_TEST_RUNTIME_ENDPOINT".to_string()),
            ..Default::default()
        },
    );
    set_user_overrides(Some(config));
    set_runtime_provider_endpoint_overrides(
        RuntimeProviderEndpointOverrides::single("fixture", " https://verified.example/v1 ")
            .expect("runtime endpoint override"),
    );

    let provider = provider_config("fixture").expect("runtime endpoint provider overlay");
    assert_eq!(resolve_base_url(&provider), "https://verified.example/v1");

    reset_overrides();
    unsafe {
        std::env::remove_var("HARN_TEST_RUNTIME_ENDPOINT");
    }
}

#[test]
fn test_session_environment_governs_provider_endpoint_env() {
    let _guard = crate::llm::env_guard();
    const ENDPOINT: &str = "HARN_TEST_POLICY_ENDPOINT";
    unsafe {
        std::env::set_var(ENDPOINT, "https://ambient.example/v1");
    }
    let provider = ProviderDef {
        base_url: "https://catalog.example/v1".to_string(),
        base_url_env: Some(ENDPOINT.to_string()),
        ..Default::default()
    };

    crate::stdlib::process::set_session_environment(Some(
        crate::security::SessionEnvironment::isolated(),
    ));
    assert_eq!(resolve_base_url(&provider), "https://catalog.example/v1");

    let granted = crate::security::SessionEnvironment::launch(
        crate::security::EnvironmentPolicyKind::Granted,
        vec![crate::security::GrantSpec {
            name: "endpoint".to_string(),
            source: crate::security::GrantSourceSpec::Env {
                var: ENDPOINT.to_string(),
            },
            expose_as_env: Some(ENDPOINT.to_string()),
        }],
        &|name| std::env::var(name).ok(),
    )
    .unwrap();
    crate::stdlib::process::set_session_environment(Some(granted));
    assert_eq!(resolve_base_url(&provider), "https://ambient.example/v1");

    crate::stdlib::process::set_session_environment(None);
    unsafe {
        std::env::remove_var(ENDPOINT);
    }
}