orca-core 0.2.3-rc.2

Core types, configuration, Runtime trait, and error types for the orca orchestrator
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99

use super::*;
use std::sync::Mutex;

/// Global mutex to serialize tests that mutate $HOME.
static HOME_LOCK: Mutex<()> = Mutex::new(());

/// Helper: set HOME env var (unsafe in Rust 2024 edition).
unsafe fn set_home(path: &std::path::Path) {
    unsafe { std::env::set_var("HOME", path) };
}

/// Helper: restore HOME env var.
unsafe fn restore_home(prev: Option<String>) {
    unsafe {
        match prev {
            Some(h) => std::env::set_var("HOME", h),
            None => std::env::remove_var("HOME"),
        }
    }
}

#[test]
fn resolve_secrets_in_cluster_config() {
    let _lock = HOME_LOCK.lock().unwrap();
    let dir = tempfile::tempdir().unwrap();

    // Point HOME to tempdir so default_path() => tempdir/.orca/secrets.json
    let prev_home = std::env::var("HOME").ok();
    // SAFETY: we hold HOME_LOCK so no other test mutates HOME concurrently.
    unsafe { set_home(dir.path()) };

    // Set up a secret in the store at the default path
    let secrets_path = crate::secrets::default_path();
    let mut store = crate::secrets::SecretStore::open(&secrets_path).unwrap();
    store.set("MY_API_KEY", "sk-test-12345").unwrap();
    drop(store);

    // Write a cluster.toml that references the secret
    let toml_path = dir.path().join("cluster.toml");
    std::fs::write(
        &toml_path,
        r#"
[cluster]
name = "test"

[ai]
provider = "openai"
api_key = "${secrets.MY_API_KEY}"
model = "gpt-4"
"#,
    )
    .unwrap();

    let config = ClusterConfig::load(&toml_path).unwrap();

    // SAFETY: restoring HOME to original value under lock.
    unsafe { restore_home(prev_home) };

    let ai = config.ai.unwrap();
    assert_eq!(ai.api_key.as_deref(), Some("sk-test-12345"));
    assert_eq!(ai.model.as_deref(), Some("gpt-4"));
}

#[test]
fn resolve_secrets_leaves_plain_values_intact() {
    let _lock = HOME_LOCK.lock().unwrap();
    let dir = tempfile::tempdir().unwrap();

    let prev_home = std::env::var("HOME").ok();
    // SAFETY: we hold HOME_LOCK so no other test mutates HOME concurrently.
    unsafe { set_home(dir.path()) };

    // Ensure default secrets path exists (empty store)
    let secrets_path = crate::secrets::default_path();
    let _store = crate::secrets::SecretStore::open(&secrets_path).unwrap();

    let toml_path = dir.path().join("cluster.toml");
    std::fs::write(
        &toml_path,
        r#"
[cluster]
name = "test"

[ai]
provider = "ollama"
endpoint = "http://localhost:11434"
"#,
    )
    .unwrap();

    let config = ClusterConfig::load(&toml_path).unwrap();

    // SAFETY: restoring HOME to original value under lock.
    unsafe { restore_home(prev_home) };

    let ai = config.ai.unwrap();
    assert_eq!(ai.endpoint.as_deref(), Some("http://localhost:11434"));
    assert_eq!(ai.provider, "ollama");
}