moadim 3.2.7

Loop engine for AI agents — routines over REST, MCP, and a built-in web UI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127

#![allow(
    clippy::missing_docs_in_private_items,
    reason = "test helpers and fixtures do not need doc comments"
)]

use axum::{
    body::Body,
    http::{header, Request, StatusCode},
};
use tower::ServiceExt;

use crate::middlewares::api_token::{API_TOKEN_ENV, TOKEN_HEADER};
use crate::routes::http::build_app;

struct EnvGuard {
    previous: Option<std::ffi::OsString>,
}

impl EnvGuard {
    fn set(value: Option<&str>) -> Self {
        let previous = std::env::var_os(API_TOKEN_ENV);
        // SAFETY: tests in this crate run single-threaded per binary.
        unsafe {
            match value {
                Some(value) => std::env::set_var(API_TOKEN_ENV, value),
                None => std::env::remove_var(API_TOKEN_ENV),
            }
        }
        Self { previous }
    }
}

impl Drop for EnvGuard {
    fn drop(&mut self) {
        // SAFETY: tests in this crate run single-threaded per binary.
        unsafe {
            match self.previous.take() {
                Some(value) => std::env::set_var(API_TOKEN_ENV, value),
                None => std::env::remove_var(API_TOKEN_ENV),
            }
        }
    }
}

#[tokio::test]
async fn loopback_default_no_token_keeps_rest_api_open() {
    let _token = EnvGuard::set(None);

    let resp = build_app(crate::routines::new_store())
        .oneshot(Request::builder().uri("/api/v1/health").body(Body::empty()).unwrap())
        .await
        .unwrap();

    assert_eq!(resp.status(), StatusCode::OK);
}

#[tokio::test]
async fn configured_token_rejects_missing_rest_credentials() {
    let _token = EnvGuard::set(Some("secret"));

    let resp = build_app(crate::routines::new_store())
        .oneshot(Request::builder().uri("/api/v1/health").body(Body::empty()).unwrap())
        .await
        .unwrap();

    assert_eq!(resp.status(), StatusCode::UNAUTHORIZED);
}

#[tokio::test]
async fn configured_token_accepts_bearer_rest_credentials() {
    let _token = EnvGuard::set(Some("secret"));

    let resp = build_app(crate::routines::new_store())
        .oneshot(
            Request::builder()
                .uri("/api/v1/health")
                .header(header::AUTHORIZATION, "Bearer secret")
                .body(Body::empty())
                .unwrap(),
        )
        .await
        .unwrap();

    assert_eq!(resp.status(), StatusCode::OK);
}

#[tokio::test]
async fn configured_token_accepts_x_moadim_token_rest_credentials() {
    let _token = EnvGuard::set(Some("secret"));

    let resp = build_app(crate::routines::new_store())
        .oneshot(
            Request::builder()
                .uri("/api/v1/health")
                .header(TOKEN_HEADER, "secret")
                .body(Body::empty())
                .unwrap(),
        )
        .await
        .unwrap();

    assert_eq!(resp.status(), StatusCode::OK);
}

#[tokio::test]
async fn configured_token_rejects_missing_mcp_credentials() {
    let _token = EnvGuard::set(Some("secret"));

    let resp = build_app(crate::routines::new_store())
        .oneshot(Request::builder().method("POST").uri("/mcp").body(Body::empty()).unwrap())
        .await
        .unwrap();

    assert_eq!(resp.status(), StatusCode::UNAUTHORIZED);
}

#[tokio::test]
async fn configured_token_does_not_block_served_ui_shell() {
    let _token = EnvGuard::set(Some("secret"));

    let resp = build_app(crate::routines::new_store())
        .oneshot(Request::builder().uri("/").body(Body::empty()).unwrap())
        .await
        .unwrap();

    assert_eq!(resp.status(), StatusCode::OK);
}