Ryth Azhur
3aafec6dd4
The IR called them react-message and django-message, so a FastAPI channel had to declare a DjangoMessage. They are client-message and server-message now, and the direction words hold wherever a channel is declared: Params / ClientMessage / ServerMessage, with mizan-core deriving <Pascal>Params and friends so no backend names a type itself. Django's ReactChannel and FastAPI's ReactChannel are both Channel. mizan-fastapi never registered a channels extension, so build_ir() emitted no channel at all and every payload type was invisible to codegen. It registers one now. RegistryExtension is an ABC requiring all(), which is what the IR reads — an extension that cannot enumerate its registrations no longer exists. The gate that should have caught the rename could not: tests/afi registered no channel because mizan-rust had no channel registry to register one in, so a five-package rename of the wire contract passed byte-parity without a channel byte crossing it. mizan-rust grows ChannelSlotKind, a CHANNELS slice, a #[mizan::channel] macro, and KDL emission whose wire_to_pascal matches Python's split; the AFI fixture now carries a channel with every slot and one with a single slot, so all three backends prove the contract byte for byte. MizanChannel held three Option<String> beside three has_*() predicates and unwrapped them with defaults; it holds an ordered slot vector, so an absent slot is absent rather than defaulted. The channels target emitted a React hooks file that a stage1-only consumer could not compile — react emits that now. The codegen's parity tests byte-compared emitted source against baselines without ever compiling it: they compile the generated crate and run its tests, import the generated Python package and call every method, and typecheck each TypeScript target against a consumer. Also fixed at source: app_visitor printed its import diagnostic to stdout, the stream export_mizan_ir writes KDL to, so a failed import silently corrupted the IR; the apps root was hardcoded to "apps"; _default_literal crashed build_ir on any non-JSON-serializable field default; Django and mizan-core derived Pascal names two different ways, disagreeing on every dotted channel name. ir.py builds a document and renders templates/ir/document.kdl.j2 rather than appending KDL strings with hand-tracked indentation, and named types resolve to a fixed point — a model reachable only through a union branch was referenced by a ref that no type block ever defined. The rest is the write-gate's own classifiers run over the standing tree: relative imports, silent swallows, Protocol contracts that should be ABCs, emitters hand-rendering target source, catch-all arms over closed enums, and comments narrating the project rather than the code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
98 lines
3.1 KiB
Python
98 lines
3.1 KiB
Python
"""The RPC transport itself over HTTP: CSRF, method guards, error envelopes."""
|
|
|
|
import json
|
|
|
|
from django.test import LiveServerTestCase
|
|
|
|
from tests.live_http import LiveRPCMixin
|
|
|
|
|
|
class CSRFTests(LiveRPCMixin, LiveServerTestCase):
|
|
def test_session_endpoint_sets_csrf_cookie(self):
|
|
from urllib.request import Request, urlopen
|
|
|
|
url = f"{self.live_server_url}/api/mizan/session/"
|
|
resp = urlopen(Request(url))
|
|
cookies = resp.headers.get_all("Set-Cookie") or []
|
|
|
|
csrf_cookies = [c for c in cookies if "csrftoken=" in c]
|
|
self.assertGreater(len(csrf_cookies), 0, "No csrftoken cookie set by /session/")
|
|
|
|
def test_call_without_csrf_is_rejected(self):
|
|
reply = self.call("system_info", with_csrf=False)
|
|
|
|
self.assertEqual(reply.status, 403)
|
|
|
|
def test_call_with_csrf_succeeds(self):
|
|
self.session_init()
|
|
|
|
self.assertIn("os_name", self.result("system_info"))
|
|
|
|
|
|
class ValidationTests(LiveRPCMixin, LiveServerTestCase):
|
|
def setUp(self):
|
|
self.session_init()
|
|
|
|
def test_missing_required_field(self):
|
|
reply = self.call("create_note", {})
|
|
|
|
self.assertEqual(reply.status, 422)
|
|
self.assertEqual(reply.body["code"], "VALIDATION_ERROR")
|
|
self.assertIn("title", reply.body["details"]["fields"])
|
|
|
|
def test_wrong_type(self):
|
|
reply = self.call("delete_note", {"id": "not-an-int"})
|
|
|
|
self.assertEqual(reply.status, 422)
|
|
self.assertEqual(reply.body["code"], "VALIDATION_ERROR")
|
|
|
|
def test_missing_multiple_fields(self):
|
|
reply = self.call("write_file", {})
|
|
|
|
self.assertEqual(reply.status, 422)
|
|
self.assertEqual(reply.body["code"], "VALIDATION_ERROR")
|
|
self.assertEqual(
|
|
set(reply.body["details"]["fields"]), {"path", "content"}
|
|
)
|
|
|
|
|
|
class ErrorCodeTests(LiveRPCMixin, LiveServerTestCase):
|
|
def setUp(self):
|
|
self.session_init()
|
|
|
|
def test_not_found_function(self):
|
|
reply = self.call("this_does_not_exist")
|
|
|
|
self.assertEqual(reply.status, 404)
|
|
self.assertEqual(reply.body["code"], "NOT_FOUND")
|
|
|
|
def test_forbidden_write_outside_home(self):
|
|
reply = self.call("write_file", {"path": "/etc/nope.txt", "content": "x"})
|
|
|
|
self.assertEqual(reply.status, 403)
|
|
self.assertEqual(reply.body["code"], "FORBIDDEN")
|
|
|
|
def test_get_method_rejected(self):
|
|
reply = self.get("/api/mizan/call/")
|
|
|
|
self.assertEqual(reply.status, 405)
|
|
self.assertEqual(reply.body["code"], "BAD_REQUEST")
|
|
|
|
def test_invalid_json_body(self):
|
|
reply = self.post("/api/mizan/call/", "not valid json{{{")
|
|
|
|
self.assertEqual(reply.status, 400)
|
|
self.assertEqual(reply.body["code"], "BAD_REQUEST")
|
|
|
|
def test_missing_fn_field(self):
|
|
reply = self.post("/api/mizan/call/", json.dumps({"not_fn": "hello"}))
|
|
|
|
self.assertEqual(reply.status, 400)
|
|
self.assertEqual(reply.body["code"], "BAD_REQUEST")
|
|
|
|
def test_empty_body(self):
|
|
reply = self.post("/api/mizan/call/", b"")
|
|
|
|
self.assertEqual(reply.status, 400)
|
|
self.assertEqual(reply.body["code"], "BAD_REQUEST")
|