anti
f2b3393669
Replaces LICENSE (GPLv3 -> AGPLv3) and prepends `SPDX-License-Identifier: AGPL-3.0-or-later` to every source file across decnet/, decnet_web/, tests/, scripts/, and tools/. Rationale: closes the GPLv3 ASP loophole so any party operating a modified DECNET as a network service must offer their modified source. Personal copyright (Samuel Paschuan) + inbound=outbound contributions make a future unilateral relicense infeasible. - LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt) - COPYRIGHT: project copyright notice - tools/add_spdx_headers.py: idempotent header injector (shebang- and PEP 263-aware) Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh). No behavior change; comments only.
92 lines
3.6 KiB
Python
92 lines
3.6 KiB
Python
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
"""CLI mode gating — master-only commands hidden when DECNET_MODE=agent."""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
import pathlib
|
|
import subprocess
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
import decnet.cli as _decnet_cli # noqa: F401 — pre-load in master mode at collection time
|
|
|
|
|
|
REPO = pathlib.Path(__file__).resolve().parent.parent.parent
|
|
#DECNET_BIN = REPO / ".venv" / "bin" / "decnet"
|
|
DECNET_BIN = Path(sys.executable).parent / "decnet"
|
|
|
|
|
|
def _clean_env(**overrides: str) -> dict[str, str]:
|
|
"""Env with no DECNET_* / PYTEST_* leakage from the parent test run.
|
|
|
|
Keeps only PATH so subprocess can locate the interpreter. HOME is
|
|
stubbed below so .env.local from the user's home doesn't leak in."""
|
|
base = {"PATH": os.environ["PATH"], "HOME": "/nonexistent-for-test"}
|
|
base.update(overrides)
|
|
# Ensure no stale DECNET_CONFIG pointing at some fixture INI
|
|
base["DECNET_CONFIG"] = "/nonexistent/decnet.ini"
|
|
# decnet.web.auth needs a JWT secret to import; provide one so
|
|
# `decnet --help` can walk the command tree.
|
|
base.setdefault("DECNET_JWT_SECRET", "x" * 32)
|
|
return base
|
|
|
|
|
|
def _help_text(env: dict[str, str]) -> str:
|
|
result = subprocess.run(
|
|
[str(DECNET_BIN), "--help"],
|
|
env=env, cwd=str(REPO),
|
|
capture_output=True, text=True, timeout=20,
|
|
)
|
|
assert result.returncode == 0, result.stderr
|
|
return result.stdout
|
|
|
|
|
|
def test_master_mode_lists_master_commands():
|
|
out = _help_text(_clean_env(DECNET_MODE="master"))
|
|
for cmd in ("api", "swarmctl", "swarm", "deploy", "teardown"):
|
|
assert cmd in out, f"expected '{cmd}' in master-mode --help"
|
|
# Agent commands are also visible on master (dual-use hosts).
|
|
for cmd in ("agent", "forwarder", "updater"):
|
|
assert cmd in out
|
|
|
|
|
|
def test_agent_mode_hides_master_commands():
|
|
out = _help_text(_clean_env(DECNET_MODE="agent", DECNET_DISALLOW_MASTER="true"))
|
|
for cmd in ("api", "swarmctl", "deploy", "teardown", "listener"):
|
|
assert cmd not in out, f"'{cmd}' leaked into agent-mode --help"
|
|
# The `swarm` subcommand group must also disappear — identify it by its
|
|
# unique help string (plain 'swarm' appears in other command descriptions).
|
|
assert "Manage swarm workers" not in out
|
|
# Worker-legitimate commands must remain.
|
|
for cmd in ("agent", "forwarder", "updater"):
|
|
assert cmd in out
|
|
|
|
|
|
def test_agent_mode_can_opt_in_to_master_via_disallow_false():
|
|
"""A hybrid dev host sets DECNET_DISALLOW_MASTER=false and keeps
|
|
full access even though DECNET_MODE=agent. This is the escape hatch
|
|
for single-machine development."""
|
|
out = _help_text(_clean_env(
|
|
DECNET_MODE="agent", DECNET_DISALLOW_MASTER="false",
|
|
))
|
|
assert "api" in out
|
|
assert "swarmctl" in out
|
|
|
|
|
|
def test_defence_in_depth_direct_call_fails_in_agent_mode(monkeypatch):
|
|
"""Typer's dispatch table hides the command in agent mode, but if
|
|
something imports the command function directly it must still bail.
|
|
_require_master_mode('api') is the belt-and-braces guard."""
|
|
monkeypatch.setenv("DECNET_MODE", "agent")
|
|
monkeypatch.setenv("DECNET_DISALLOW_MASTER", "true")
|
|
# _require_master_mode reads os.environ at call time — no reimport needed.
|
|
# Reimporting decnet.cli would corrupt sys.modules["decnet"].cli (the
|
|
# parent-package attribute that `import decnet.cli as x` resolves through)
|
|
# and no restore strategy can fix that without reloading the decnet package.
|
|
from decnet.cli import _require_master_mode
|
|
import typer
|
|
with pytest.raises(typer.Exit):
|
|
_require_master_mode("api")
|