Spaces:
Running
Running
| from __future__ import annotations | |
| import pytest | |
| from trace2mcp.models import ( | |
| TraceEvent, | |
| TraceValidationError, | |
| Workflow, | |
| WorkflowValidationError, | |
| ) | |
| def test_deserialized_workflow_missing_security_metadata_is_fail_closed(): | |
| workflow = Workflow.from_dict( | |
| {"name": "hostile", "inputs": {}, "nodes": [{"id": "a", "tool": "custom"}]} | |
| ) | |
| assert workflow.safety == "unsafe" | |
| assert workflow.nodes[0].side_effect == "unknown" | |
| def test_model_rejects_control_characters_and_invalid_effects(): | |
| with pytest.raises(TraceValidationError, match="unsafe tool name"): | |
| TraceEvent("a", "tool\nname", {}, None) | |
| with pytest.raises(TraceValidationError, match="unsupported side_effect"): | |
| TraceEvent("a", "tool", {}, None, side_effect="harmless") | |
| with pytest.raises(WorkflowValidationError, match="control characters"): | |
| Workflow.from_dict( | |
| { | |
| "name": "bad", | |
| "safety": "safe", | |
| "nodes": [{"id": "a", "tool": "x\u0000y", "side_effect": "read"}], | |
| } | |
| ) | |