mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-04 22:32:12 +03:00
bddec84f4e
Introduce full AI orchestration ecosystem: - MCP Server with 16 tools, scoped auth, and audit logging - A2A v0.3 server with JSON-RPC 2.0, SSE streaming, and task manager - Auto-Combo engine with 6-factor scoring and self-healing - VS Code extension with smart dispatch and budget tracking - Harden CI pipeline: add static checks, remove continue-on-error - Add translator schema validation tests - Update .gitignore and CHANGELOG for release checklist
73 lines
2.3 KiB
JavaScript
73 lines
2.3 KiB
JavaScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
|
|
import {
|
|
evaluateToolScopes,
|
|
resolveCallerScopeContext,
|
|
} from "../../open-sse/mcp-server/scopeEnforcement.ts";
|
|
|
|
test("resolveCallerScopeContext prioritizes authInfo scopes", () => {
|
|
const context = resolveCallerScopeContext(
|
|
{
|
|
authInfo: {
|
|
clientId: "client-auth",
|
|
scopes: ["read:health", "read:combos"],
|
|
},
|
|
_meta: { scopes: ["write:combos"] },
|
|
sessionId: "session-1",
|
|
},
|
|
["read:usage"]
|
|
);
|
|
|
|
assert.equal(context.callerId, "client-auth");
|
|
assert.equal(context.source, "authInfo");
|
|
assert.deepEqual(context.scopes, ["read:health", "read:combos"]);
|
|
});
|
|
|
|
test("resolveCallerScopeContext falls back to _meta scopes", () => {
|
|
const context = resolveCallerScopeContext(
|
|
{
|
|
_meta: {
|
|
scopes: ["read:quota", "read:models"],
|
|
},
|
|
sessionId: "session-meta",
|
|
},
|
|
["read:usage"]
|
|
);
|
|
|
|
assert.equal(context.callerId, "session-meta");
|
|
assert.equal(context.source, "meta");
|
|
assert.deepEqual(context.scopes, ["read:quota", "read:models"]);
|
|
});
|
|
|
|
test("resolveCallerScopeContext uses env fallback when caller has no scopes", () => {
|
|
const context = resolveCallerScopeContext({ sessionId: "session-env" }, ["read:health"]);
|
|
assert.equal(context.source, "env");
|
|
assert.deepEqual(context.scopes, ["read:health"]);
|
|
});
|
|
|
|
test("evaluateToolScopes allows requests when enforcement is disabled", () => {
|
|
const check = evaluateToolScopes("omniroute_switch_combo", [], false);
|
|
assert.equal(check.allowed, true);
|
|
assert.deepEqual(check.missing, []);
|
|
});
|
|
|
|
test("evaluateToolScopes denies tool execution when required scope is missing", () => {
|
|
const check = evaluateToolScopes("omniroute_switch_combo", ["read:combos"], true);
|
|
assert.equal(check.allowed, false);
|
|
assert.ok(check.missing.includes("write:combos"));
|
|
assert.equal(check.reason, "missing_scopes");
|
|
});
|
|
|
|
test("evaluateToolScopes supports wildcard scopes", () => {
|
|
const check = evaluateToolScopes("omniroute_get_health", ["read:*"], true);
|
|
assert.equal(check.allowed, true);
|
|
assert.deepEqual(check.missing, []);
|
|
});
|
|
|
|
test("evaluateToolScopes denies unknown tool names", () => {
|
|
const check = evaluateToolScopes("omniroute_unknown_tool", ["*"], true);
|
|
assert.equal(check.allowed, false);
|
|
assert.equal(check.reason, "tool_definition_missing");
|
|
});
|