theway-daemon 0.1.21

theway daemon — the single agent-runtime kernel (bin `thewayd`): harness assembly, local/sandbox tool policy, triggers/cron/session/DAG runtime, skills, MCP/LSP wiring, serving the gRPC/HTTP/MCP transports from theway-transport. Terminal UI lives in the theway-tui crate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140

//! Tests for `mcp_loader` streamable-HTTP connection assembly and auth
//! resolution — split out of `mod.rs` (see docs/rust-test-files.md).

use super::*;

use theway_mcp::HttpMcpAuth;
use theway_transport::auth::{AuthStore, ProviderCredential};

fn streamable_http_server(endpoint: &str) -> ServerConfig {
    let mut server = http_server(endpoint);
    server.name = "streamable-http-server".into();
    server
}

#[tokio::test]
async fn connect_streamable_http_success_applies_all_options() {
    // Arrange
    let mut server = streamable_http_server("http://127.0.0.1:9/mcp");
    server.request_timeout_ms = Some(1_234);
    server.sse_idle_timeout_ms = Some(5_678);
    server.body_cap_bytes = Some(999);
    server.reconnect = Some(ReconnectConfig {
        initial_ms: Some(100),
        max_ms: Some(2_000),
        max_attempts: Some(3),
    });

    // Act
    let (_work, _base, paths) = test_paths();
    let client = connect_streamable_http(&server, &paths.base.join("auth.json"))
        .await
        .expect("connect_streamable_http should assemble a client without network I/O");

    // Assert: assembly succeeded and cleanup does not hang.
    client.close().await;
}

#[tokio::test]
async fn connect_streamable_http_success_applies_reconnect_defaults() {
    // Arrange
    let mut server = streamable_http_server("http://127.0.0.1:9/mcp");
    server.reconnect = Some(ReconnectConfig {
        initial_ms: None,
        max_ms: None,
        max_attempts: Some(2),
    });

    // Act
    let (_work, _base, paths) = test_paths();
    let client = connect_streamable_http(&server, &paths.base.join("auth.json"))
        .await
        .expect("connect_streamable_http should assemble a client without network I/O");

    // Assert: assembly succeeded and cleanup does not hang.
    client.close().await;
}

#[tokio::test]
async fn connect_one_streamable_http_missing_endpoint_returns_err() {
    // Arrange
    let mut server = streamable_http_server("");
    server.endpoint = None;

    // Act
    let (_work, _base, paths) = test_paths();
    let err = match connect_one(&server, &paths.work_dir, &paths.base.join("auth.json")).await {
        Ok(_) => panic!("streamable_http without endpoint should fail"),
        Err(err) => err,
    };

    // Assert
    assert!(err.to_string().contains("missing endpoint"), "{err}");
}

#[test]
fn resolve_http_auth_none_returns_none() {
    // Arrange & Act
    let (_work, _base, paths) = test_paths();
    let auth = resolve_http_auth(None, &paths.base.join("auth.json")).unwrap();

    // Assert
    assert!(matches!(auth, HttpMcpAuth::None));
}

#[test]
fn resolve_http_auth_loads_bearer_from_auth_store() {
    // Arrange
    let (_work, base, _paths) = test_paths();
    let auth_path = base.path().join("auth.json");
    let mut store = AuthStore::default();
    store.set(
        "mcp-example:default",
        ProviderCredential::ApiKey {
            value: "secret-token".into(),
        },
    );
    store.save_to(&auth_path).unwrap();

    // Act
    let auth = resolve_http_auth(
        Some(&HttpAuthConfig {
            kind: "bearer".into(),
            token_keychain_ref: Some("mcp-example:default".into()),
        }),
        &auth_path,
    )
    .unwrap();

    // Assert
    match auth {
        HttpMcpAuth::Bearer { token } => assert_eq!(token, "secret-token"),
        other => panic!("expected bearer auth, got {other:?}"),
    }
}

#[test]
fn resolve_http_auth_reports_store_load_failure_with_recovery_hint() {
    // Arrange
    let (_work, base, _paths) = test_paths();
    let auth_path = base.path().join("auth.json");
    std::fs::write(&auth_path, "{ not valid json").unwrap();

    // Act
    let err = resolve_http_auth(
        Some(&HttpAuthConfig {
            kind: "bearer".into(),
            token_keychain_ref: Some("mcp-example:default".into()),
        }),
        &auth_path,
    )
    .unwrap_err()
    .to_string();

    // Assert
    assert!(
        err.contains("failed to load local credential store"),
        "{err}"
    );
    assert!(err.contains("run /login <configured-token-ref>"), "{err}");
}