selfware 0.6.1

Your personal AI workshop — software you own, software that lasts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127

use super::*;

#[test]
fn test_http_request_name() {
    let tool = HttpRequest;
    assert_eq!(tool.name(), "http_request");
}

#[test]
fn test_http_request_description() {
    let tool = HttpRequest;
    assert!(tool.description().contains("HTTP"));
    assert!(tool.description().contains("API"));
}

#[test]
fn test_http_request_schema() {
    let tool = HttpRequest;
    let schema = tool.schema();
    assert_eq!(schema["type"], "object");
    assert!(schema["properties"]["url"].is_object());
    assert!(schema["properties"]["method"].is_object());
    assert!(schema["properties"]["headers"].is_object());
}

#[test]
fn test_http_request_schema_methods() {
    let tool = HttpRequest;
    let schema = tool.schema();
    let methods = schema["properties"]["method"]["enum"].as_array().unwrap();
    assert!(methods.contains(&serde_json::json!("GET")));
    assert!(methods.contains(&serde_json::json!("POST")));
    assert!(methods.contains(&serde_json::json!("PUT")));
    assert!(methods.contains(&serde_json::json!("DELETE")));
}

#[tokio::test]
async fn test_http_request_invalid_url() {
    let tool = HttpRequest;
    let result = tool
        .execute(serde_json::json!({
            "url": "not-a-valid-url"
        }))
        .await;
    assert!(result.is_err());
}

#[tokio::test]
async fn test_http_request_invalid_scheme() {
    let tool = HttpRequest;
    let result = tool
        .execute(serde_json::json!({
            "url": "ftp://example.com/file"
        }))
        .await;
    assert!(result.is_err());
    assert!(result.unwrap_err().to_string().contains("HTTP"));
}

#[tokio::test]
async fn test_http_request_invalid_method() {
    let tool = HttpRequest;
    let result = tool
        .execute(serde_json::json!({
            "url": "https://example.com",
            "method": "INVALID"
        }))
        .await;
    assert!(result.is_err());
}

#[test]
fn test_http_request_schema_required() {
    let tool = HttpRequest;
    let schema = tool.schema();
    let required = schema["required"].as_array().unwrap();
    assert!(required.contains(&serde_json::json!("url")));
}

#[test]
fn test_http_request_schema_has_timeout() {
    let tool = HttpRequest;
    let schema = tool.schema();
    assert!(schema["properties"]["timeout_secs"].is_object());
}

#[test]
fn test_http_request_schema_has_body() {
    let tool = HttpRequest;
    let schema = tool.schema();
    assert!(schema["properties"]["body"].is_object());
}

#[tokio::test]
async fn test_http_request_missing_url() {
    let tool = HttpRequest;
    let result = tool.execute(serde_json::json!({})).await;
    assert!(result.is_err());
}

#[tokio::test]
async fn test_http_request_file_scheme() {
    let tool = HttpRequest;
    let result = tool
        .execute(serde_json::json!({
            "url": "file:///etc/passwd"
        }))
        .await;
    assert!(result.is_err());
}

#[test]
fn test_validate_http_request_target_allows_localhost() {
    let url = reqwest::Url::parse("http://localhost:8888/health").unwrap();
    let policy = validate_http_request_target(&url, false).unwrap();
    assert!(policy.allow_localhost);
    assert!(!policy.allow_private);
}

#[test]
fn test_validate_http_request_target_blocks_private_lan_without_opt_in() {
    let url = reqwest::Url::parse("http://192.168.1.10:8000/health").unwrap();
    let error = validate_http_request_target(&url, false).unwrap_err();
    assert!(error
        .to_string()
        .contains("Blocked request to private/internal network address"));
}