typesec-agent 0.11.0

Agent executor with typestate and capability-based access control
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121

use super::*;
use std::sync::Arc;
use typesec_core::{
    CanExecute, CanRead, ResourceId, SubjectId,
    policy::{PolicyEngine, PolicyResult},
    resource::GenericResource,
    typestate::Credentials,
};

struct AllowAll;
impl PolicyEngine for AllowAll {
    fn check(&self, _: &SubjectId, _: &str, _: &ResourceId) -> PolicyResult {
        PolicyResult::Allow
    }
}

fn no_op_tool(_resource: &GenericResource) -> ToolFuture<'_> {
    Box::pin(async { Ok(()) })
}

#[tokio::test]
async fn protected_tool_invokes_with_capability() {
    let agent = SecureAgent::new(Arc::new(AllowAll))
        .authenticate_unverified(Credentials::new("agent:test", "tok"))
        .expect("auth ok");
    let resource = GenericResource::new("Gmail.ListEmails", "tool");
    let cap: Capability<CanExecute, GenericResource> =
        agent.request_capability(&resource).await.expect("cap ok");
    let tool = ProtectedTool::<CanExecute, _, _>::new(
        "gmail.list",
        "List email messages",
        resource,
        no_op_tool,
    );

    assert_eq!(tool.spec().required_permission, "execute");
    tool.invoke(&agent, &cap).await.expect("tool should run");
}

#[tokio::test]
async fn protected_tool_rejects_capability_for_other_resource() {
    let agent = SecureAgent::new(Arc::new(AllowAll))
        .authenticate_unverified(Credentials::new("agent:test", "tok"))
        .expect("auth ok");
    let cap_resource = GenericResource::new("Gmail.ListEmails", "tool");
    let tool_resource = GenericResource::new("Gmail.DeleteEmail", "tool");
    let cap: Capability<CanExecute, GenericResource> = agent
        .request_capability(&cap_resource)
        .await
        .expect("cap ok");
    let tool = ProtectedTool::<CanExecute, _, _>::new(
        "gmail.delete",
        "Delete an email message",
        tool_resource,
        no_op_tool,
    );

    assert!(matches!(
        tool.invoke(&agent, &cap).await,
        Err(TaskError::CapabilityMismatch(reason)) if reason.contains("Gmail.ListEmails")
    ));
}

#[tokio::test]
async fn registry_lists_and_invokes_registered_tools() {
    let agent = SecureAgent::new(Arc::new(AllowAll))
        .authenticate_unverified(Credentials::new("agent:test", "tok"))
        .expect("auth ok");
    let resource = GenericResource::new("Gmail.ListEmails", "tool");
    let cap: Capability<CanExecute, GenericResource> =
        agent.request_capability(&resource).await.expect("cap ok");
    let mut registry = ToolRegistry::new();
    registry.register(ProtectedTool::<CanExecute, _, _>::new(
        "gmail.list",
        "List email messages",
        resource,
        no_op_tool,
    ));

    let specs = registry.list_specs();
    assert_eq!(specs.len(), 1);
    assert_eq!(specs[0].name, "gmail.list");
    assert_eq!(
        registry
            .spec("gmail.list")
            .expect("registered spec")
            .required_permission,
        "execute"
    );

    registry
        .invoke("gmail.list", &agent, &cap)
        .await
        .expect("registry invoke should run");
}

#[tokio::test]
async fn registry_rejects_wrong_capability_type_and_unknown_tool() {
    let agent = SecureAgent::new(Arc::new(AllowAll))
        .authenticate_unverified(Credentials::new("agent:test", "tok"))
        .expect("auth ok");
    let resource = GenericResource::new("Gmail.ListEmails", "tool");
    let read_cap: Capability<CanRead, GenericResource> =
        agent.request_capability(&resource).await.expect("cap ok");
    let mut registry = ToolRegistry::new();
    registry.register(ProtectedTool::<CanExecute, _, _>::new(
        "gmail.list",
        "List email messages",
        resource,
        no_op_tool,
    ));

    assert!(matches!(
        registry.invoke("gmail.list", &agent, &read_cap).await,
        Err(TaskError::CapabilityMismatch(reason)) if reason.contains("Capability<execute")
    ));
    assert!(matches!(
        registry.invoke("missing", &agent, &read_cap).await,
        Err(TaskError::UnknownTool(name)) if name == "missing"
    ));
}