tenuo 0.1.0-beta.20

Agent Capability Flow Control - Rust core library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

//! CEL standard library integration tests.
//!
//! These tests require the `cel` feature to be enabled.

#![cfg(feature = "cel")]

use tenuo::cel::evaluate_with_value_context;
use tenuo::constraints::ConstraintValue;

#[test]
fn test_cel_time_functions() {
    let value = ConstraintValue::Integer(1); // Dummy value

    // Test time.now() returns a string
    // Note: time_now requires a dummy argument due to library limitation
    assert!(evaluate_with_value_context("time_now(null).startsWith('20')", &value).unwrap());

    // Test time.is_expired
    // Past date
    assert!(
        evaluate_with_value_context("time_is_expired('2000-01-01T00:00:00Z')", &value).unwrap()
    );
    // Future date
    assert!(
        !evaluate_with_value_context("time_is_expired('2099-01-01T00:00:00Z')", &value).unwrap()
    );

    // Test time.since
    // Past date should have positive duration
    assert!(evaluate_with_value_context("time_since('2000-01-01T00:00:00Z') > 0", &value).unwrap());
}

#[test]
fn test_cel_network_functions() {
    let value = ConstraintValue::Integer(1); // Dummy value

    // Test net.in_cidr
    assert!(
        evaluate_with_value_context("net_in_cidr('192.168.1.5', '192.168.1.0/24')", &value)
            .unwrap()
    );
    assert!(
        !evaluate_with_value_context("net_in_cidr('10.0.0.5', '192.168.1.0/24')", &value).unwrap()
    );

    // IPv6
    assert!(
        evaluate_with_value_context("net_in_cidr('2001:db8::1', '2001:db8::/32')", &value).unwrap()
    );

    // Test net.is_private
    assert!(evaluate_with_value_context("net_is_private('192.168.1.1')", &value).unwrap());
    assert!(evaluate_with_value_context("net_is_private('10.0.0.1')", &value).unwrap());
    assert!(!evaluate_with_value_context("net_is_private('8.8.8.8')", &value).unwrap());
}