met 1.0.0-beta-preview

Metrale Engine: pure Rust LLM inference server (HTTP API, scheduler, TUI, CLI).
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76

// SPDX-License-Identifier: MIT OR Apache-2.0

//! 2026-09-26: Envelope-aware sanitizing with the `MinimaxXmlParser` markers. Inside each
//! of its three `envelope_open` spellings the inner `<invoke …>` and `<parameter name=…>`
//! tags pass through as content; outside an envelope they are orphan fragments and are
//! dropped.
//!
//! Owner: server API.
//! Invariants: none beyond the types.

use super::harness::Stream;
use crate::tool_parser::{MinimaxXmlParser, ToolCallParser};

const ENVELOPES: [(&str, &str); 3] = [
    ("<minimax:tool_call>", "</minimax:tool_call>"),
    ("<minimax:_call>", "</minimax:_call>"),
    ("<tool_call>", "</tool_call>"),
];

#[test]
fn every_envelope_spelling_lets_the_inner_call_through() {
    let markers = MinimaxXmlParser.leak_markers();
    for (open, close) in ENVELOPES {
        let body = format!(
            "{open}\n<invoke name=\"bash\">\n<parameter name=\"command\">uname -r</parameter>\n</invoke>\n{close}"
        );
        let mut s = Stream::new(&markers);
        s.feed(&body);
        assert!(
            !s.suppressing(),
            "{open}: the envelope path must not enter orphan suppression"
        );
        assert!(!s.inside_envelope(), "{open}: state cleared after close");
        assert_eq!(s.finish(), body, "{open}: body must pass through verbatim");
    }
}

#[test]
fn envelope_spellings_survive_byte_at_a_time_chunking() {
    let markers = MinimaxXmlParser.leak_markers();
    for (open, close) in ENVELOPES {
        let body = format!("{open}<invoke name=\"read\"></invoke>{close}");
        let mut s = Stream::new(&markers);
        s.feed_chunked(&body, 1);
        assert_eq!(s.finish(), body, "{open}: fragmented envelope");
    }
}

#[test]
fn an_invoke_outside_any_envelope_is_still_suppressed() {
    let markers = MinimaxXmlParser.leak_markers();
    let mut s = Stream::new(&markers);
    s.feed("prefix<invoke name=\"bash\">cmd</invoke>tail");
    let out = s.finish();
    assert_eq!(out, "prefixtail");
}

#[test]
fn an_unterminated_envelope_does_not_leave_the_stream_stuck_open() {
    let markers = MinimaxXmlParser.leak_markers();
    let mut s = Stream::new(&markers);
    s.feed("thinking<minimax:tool_call><invoke name=\"read\">");
    assert!(
        s.inside_envelope(),
        "an unclosed envelope stays open for the rest of the stream"
    );
    assert!(
        !s.suppressing(),
        "an open envelope must never engage orphan suppression"
    );
    let out = s.finish();
    assert!(
        out.starts_with("thinking<minimax:tool_call>"),
        "prefix and envelope opener emit: {out:?}"
    );
}