trusty-mpm 1.8.2

trusty-mpm: unified multi-agent orchestration platform (core, daemon, CLI, TUI, Telegram)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

//! Tests for the #8942 registration route's status mapping. A scratch-root
//! daemon state (its tmux driver is a no-op) and a fake verifier: nothing
//! reaches tmux, the process table or the live daemon.

use super::*;

use crate::session_manager::SessionKind;

struct Fixed(Result<(), String>);

impl BindingVerifier for Fixed {
    fn verify(&self, _dir: &Path, _session: &str) -> Result<(), String> {
        self.0.clone()
    }
}

async fn state() -> (tempfile::TempDir, Arc<DaemonState>) {
    let root = crate::test_support::hermetic_temp_dir();
    let state = Arc::new(DaemonState::with_root_isolated_managed(root.path().to_path_buf()).await);
    (root, state)
}

fn body(dir: PathBuf) -> SupervisorRegistration {
    SupervisorRegistration {
        dir,
        session: "tm-arch".into(),
        poll_session: None,
        collector_session: None,
    }
}

/// Fail-Open Check: an unbound session is a 403 and no record.
#[tokio::test]
async fn the_route_refuses_an_unbound_session_with_403() {
    let (root, state) = state().await;
    let reg = body(root.path().to_path_buf());
    let out = register_supervisor_core(&state, &reg, &Fixed(Err("no record".into()))).await;
    assert_eq!(out.status, 403);
    assert!(state.session_manager().await.list().await.is_empty());

    let out = register_supervisor_core(&state, &reg, &Fixed(Ok(()))).await;
    assert_eq!(out.status, 200);
    let records = state.session_manager().await.list().await;
    assert_eq!(records.len(), 1);
    assert_eq!(records[0].kind, SessionKind::Supervisor);
}

/// Fail-Open Check, #8942 critic MEDIUM: the route itself, with its
/// production [`LaunchRecordBinding`] over the scratch framework root, refuses
/// a session no `claude` runs in with 403 and writes nothing. Every tmux call
/// goes to a private `-L` server with no sessions.
#[tokio::test]
async fn the_route_refuses_a_missing_session_through_the_launch_record() {
    let (root, state) = state().await;
    assert_eq!(state.framework_root(), root.path(), "a scratch root");
    let dir = root.path().join("architect");
    std::fs::create_dir_all(&dir).expect("architect dir");
    let reg = SupervisorRegistration {
        poll_session: Some("tm-arch-8942-absent-poll".into()),
        session: "tm-arch-8942-absent".into(),
        ..body(dir)
    };
    let server = crate::test_support::tmux_session::PrivateTmuxServer::new("tmux", "reg403");

    let response = crate::core::tmux::with_tmux_binary(
        server.shim_bin().into(),
        register_supervisor_route(State(Arc::clone(&state)), Json(reg)),
    )
    .await
    .into_response();

    assert_eq!(response.status(), 403);
    assert!(state.session_manager().await.list().await.is_empty());
}

/// A relative directory is a 400, before any binding check.
#[tokio::test]
async fn the_route_rejects_a_relative_dir_with_400() {
    let (_root, state) = state().await;
    let out = register_supervisor_core(&state, &body("rel".into()), &Fixed(Ok(()))).await;
    assert_eq!(out.status, 400);
}