sxmc 0.2.1

One Rust binary to bridge skills, MCP, and APIs into reusable agent, terminal, and automation workflows
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use crate::error::{Result, SxmcError};

/// Resolve a secret value that may use env: or file: prefixes.
///
/// Supported formats:
/// - `env:VAR_NAME` — read from environment variable
/// - `file:/path/to/secret` — read from file (trimmed)
/// - anything else — returned as-is (literal value)
pub fn resolve_secret(value: &str) -> Result<String> {
    if let Some(var_name) = value.strip_prefix("env:") {
        std::env::var(var_name)
            .map_err(|_| SxmcError::Other(format!("Environment variable '{}' not set", var_name)))
    } else if let Some(path) = value.strip_prefix("file:") {
        std::fs::read_to_string(path)
            .map(|s| s.trim().to_string())
            .map_err(|e| SxmcError::Other(format!("Failed to read secret file '{}': {}", path, e)))
    } else {
        Ok(value.to_string())
    }
}

/// Resolve a header value, applying secret resolution to the value part.
/// Input format: "Key:Value" where Value can use env:/file: prefixes.
pub fn resolve_header(header: &str) -> Result<(String, String)> {
    let (key, value) = header.split_once(':').ok_or_else(|| {
        SxmcError::Other(format!(
            "Invalid header format '{}' — expected Key:Value",
            header
        ))
    })?;

    let resolved = resolve_secret(value.trim())?;
    Ok((key.trim().to_string(), resolved))
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_resolve_literal() {
        assert_eq!(resolve_secret("my-token-123").unwrap(), "my-token-123");
    }

    #[test]
    fn test_resolve_env() {
        std::env::set_var("SXMC_TEST_SECRET", "secret_value_42");
        assert_eq!(
            resolve_secret("env:SXMC_TEST_SECRET").unwrap(),
            "secret_value_42"
        );
        std::env::remove_var("SXMC_TEST_SECRET");
    }

    #[test]
    fn test_resolve_env_missing() {
        assert!(resolve_secret("env:SXMC_NONEXISTENT_VAR_99999").is_err());
    }

    #[test]
    fn test_resolve_file() {
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("secret.txt");
        std::fs::write(&path, "file_secret\n").unwrap();
        assert_eq!(
            resolve_secret(&format!("file:{}", path.display())).unwrap(),
            "file_secret"
        );
    }

    #[test]
    fn test_resolve_header() {
        let (key, val) = resolve_header("Authorization: Bearer token123").unwrap();
        assert_eq!(key, "Authorization");
        assert_eq!(val, "Bearer token123");
    }

    #[test]
    fn test_resolve_header_with_env() {
        std::env::set_var("SXMC_TEST_TOKEN", "bearer_abc");
        let (key, val) = resolve_header("Authorization: env:SXMC_TEST_TOKEN").unwrap();
        assert_eq!(key, "Authorization");
        assert_eq!(val, "bearer_abc");
        std::env::remove_var("SXMC_TEST_TOKEN");
    }
}