newt-core 0.8.0

Newt-Agent core types, errors, and the NeMoCode-style tier router
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

use super::*;

#[test]
fn management_login_argv_round_trips_only_from_newt_configuration() {
    let text = "[[mcp_servers]]\nname = 'documents'\ncommand = 'document-server'\nlogin_argv = ['document-client', 'login', 'literal;argument']\n";
    let native = parse_newt_mcp_toml(text);
    let serialized = serde_json::to_value(&native[0]).unwrap();
    assert_eq!(
        serialized["login_argv"],
        serde_json::json!(["document-client", "login", "literal;argument"])
    );
    let persisted = crate::Config::with_mcp_server_added("", &native[0]).unwrap();
    let round_trip: crate::Config = toml::from_str(&persisted).unwrap();
    assert_eq!(
        serde_json::to_value(&round_trip.mcp_servers[0]).unwrap()["login_argv"],
        serialized["login_argv"]
    );
    let borrowed = parse_claude_mcp(
        &serde_json::json!({"mcpServers": {"documents": {"command": "document-server", "login_argv": ["untrusted-login"]}}}),
    );
    let serialized = serde_json::to_value(&borrowed[0]).unwrap();
    assert!(
        serialized.get("login_argv").is_none(),
        "borrowed metadata cannot configure a host login command"
    );
}

#[test]
fn management_login_argv_requires_an_enabled_trusted_stdio_entry() {
    let mut entry: McpServerEntry = toml::from_str("name = 'documents'\ncommand = 'document-server'\nlogin_argv = ['document-client', 'login']\n").unwrap();
    assert_eq!(
        entry.operator_login_argv(),
        Some(["document-client".to_owned(), "login".to_owned()].as_slice())
    );
    entry.trust = McpTrust::Untrusted;
    assert!(entry.operator_login_argv().is_none());
    entry.trust = McpTrust::Trusted;
    entry.enabled = false;
    assert!(entry.operator_login_argv().is_none());
    entry.enabled = true;
    entry.transport = TransportKind::Http;
    assert!(entry.operator_login_argv().is_none());
}

// ---- ~/.newt/mcp.toml source: parse + precedence ----
#[test]
fn parse_newt_mcp_toml_reads_servers_and_tolerates_garbage() {
    let text = r#"
[[mcp_servers]]
name = "a"
command = "a-mcp"

[[mcp_servers]]
name = "b"
type = "http"
url = "https://x/mcp"
"#;
    let got = parse_newt_mcp_toml(text);
    assert_eq!(got.len(), 2);
    assert_eq!(got[0].name, "a");
    assert_eq!(got[0].command.as_deref(), Some("a-mcp"));
    assert_eq!(got[1].transport, TransportKind::Http);
    // Malformed TOML → empty (non-fatal), missing section → empty.
    assert!(parse_newt_mcp_toml("not = = toml [").is_empty());
    assert!(parse_newt_mcp_toml("other = 1").is_empty());
}
#[test]
fn parse_newt_mcp_toml_reads_secret_refs_and_literals() {
    let text = r#"
[[mcp_servers]]
name = "gh"
command = "gh-mcp"
[mcp_servers.env]
GH_TOKEN = { cmd = "vault kv get -field=token secret/gh" }
RUST_LOG = "debug"
"#;
    let got = parse_newt_mcp_toml(text);
    assert_eq!(got.len(), 1);
    assert_eq!(
        got[0].env.get("RUST_LOG"),
        Some(&SecretValue::literal("debug"))
    );
    assert!(matches!(
        got[0].env.get("GH_TOKEN"),
        Some(SecretValue::Ref(SecretRef { cmd: Some(_), .. }))
    ));
}