net-cli 0.34.0

Unified `net-mesh` command-line tool for the Net mesh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

//! `net mcp pin` end-to-end: approve → list → reject → list against an
//! isolated pin-store file. Exercises the CLI wiring, path override, and the
//! JSON output contract without touching the real per-user store or a mesh.

use assert_cmd::Command;
use predicates::prelude::*;

fn net_mesh() -> Command {
    Command::cargo_bin("net-mesh").expect("net-mesh binary")
}

const CAP: &str = "homelab/github.create_issue";

#[test]
fn pin_approve_then_list_then_reject_round_trips() {
    let dir = tempfile::tempdir().expect("tempdir");
    let store = dir.path().join("pins.json");

    // Approve — reports the capability as approved.
    net_mesh()
        .args([
            "mcp",
            "pin",
            "approve",
            CAP,
            "--output",
            "json",
            "--pin-store",
        ])
        .arg(&store)
        .assert()
        .success()
        .stdout(predicate::str::contains(CAP))
        .stdout(predicate::str::contains("approved"));

    // List — the capability shows up as approved.
    net_mesh()
        .args(["mcp", "pin", "list", "--output", "json", "--pin-store"])
        .arg(&store)
        .assert()
        .success()
        .stdout(predicate::str::contains(CAP))
        .stdout(predicate::str::contains("approved"));

    // Reject — removes it.
    net_mesh()
        .args([
            "mcp",
            "pin",
            "reject",
            CAP,
            "--output",
            "json",
            "--pin-store",
        ])
        .arg(&store)
        .assert()
        .success()
        .stdout(predicate::str::contains("rejected"));

    // List again — gone.
    net_mesh()
        .args(["mcp", "pin", "list", "--output", "json", "--pin-store"])
        .arg(&store)
        .assert()
        .success()
        .stdout(predicate::str::contains(CAP).not());
}

#[test]
fn pin_approve_rejects_a_malformed_cap_id() {
    let dir = tempfile::tempdir().expect("tempdir");
    let store = dir.path().join("pins.json");
    // No `/` — not a `provider/capability` id.
    net_mesh()
        .args(["mcp", "pin", "approve", "bareword", "--pin-store"])
        .arg(&store)
        .assert()
        .failure();
}