Files
github--github-mcp-server/pkg/github/tools_validation_test.go
T
copilot-swe-agent[bot] 81c8337884
CodeQL / Analyze (go) (push) Has been cancelled
Build and Test Go Project / build (macos-latest) (push) Has been cancelled
Build and Test Go Project / build (ubuntu-latest) (push) Has been cancelled
Build and Test Go Project / build (windows-latest) (push) Has been cancelled
CodeQL / Analyze (actions) (push) Has been cancelled
Update test comment to accurately describe protections
Co-authored-by: SamMorrowDrums <4811358+SamMorrowDrums@users.noreply.github.com>
2026-01-06 14:33:39 +00:00

327 lines
10 KiB
Go

package github
import (
"testing"
"github.com/github/github-mcp-server/pkg/inventory"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
)
// stubTranslation is a simple translation function for testing
func stubTranslation(_, fallback string) string {
return fallback
}
// TestAllToolsHaveRequiredMetadata validates that all tools have mandatory metadata:
// - Toolset must be set (non-empty ID)
// - ReadOnlyHint annotation must be explicitly set (not nil)
func TestAllToolsHaveRequiredMetadata(t *testing.T) {
tools := AllTools(stubTranslation)
require.NotEmpty(t, tools, "AllTools should return at least one tool")
for _, tool := range tools {
t.Run(tool.Tool.Name, func(t *testing.T) {
// Toolset ID must be set
assert.NotEmpty(t, tool.Toolset.ID,
"Tool %q must have a Toolset.ID", tool.Tool.Name)
// Toolset description should be set for documentation
assert.NotEmpty(t, tool.Toolset.Description,
"Tool %q should have a Toolset.Description", tool.Tool.Name)
// Annotations must exist and have ReadOnlyHint explicitly set
require.NotNil(t, tool.Tool.Annotations,
"Tool %q must have Annotations set (for ReadOnlyHint)", tool.Tool.Name)
// We can't distinguish between "not set" and "set to false" for a bool,
// but having Annotations non-nil confirms the developer thought about it.
// The ReadOnlyHint value itself is validated by ensuring Annotations exist.
})
}
}
// TestAllResourcesHaveRequiredMetadata validates that all resources have mandatory metadata
func TestAllResourcesHaveRequiredMetadata(t *testing.T) {
// Resources are now stateless - no client functions needed
resources := AllResources(stubTranslation)
require.NotEmpty(t, resources, "AllResources should return at least one resource")
for _, res := range resources {
t.Run(res.Template.Name, func(t *testing.T) {
// Toolset ID must be set
assert.NotEmpty(t, res.Toolset.ID,
"Resource %q must have a Toolset.ID", res.Template.Name)
// HandlerFunc must be set
assert.True(t, res.HasHandler(),
"Resource %q must have a HandlerFunc", res.Template.Name)
})
}
}
// TestAllPromptsHaveRequiredMetadata validates that all prompts have mandatory metadata
func TestAllPromptsHaveRequiredMetadata(t *testing.T) {
prompts := AllPrompts(stubTranslation)
require.NotEmpty(t, prompts, "AllPrompts should return at least one prompt")
for _, prompt := range prompts {
t.Run(prompt.Prompt.Name, func(t *testing.T) {
// Toolset ID must be set
assert.NotEmpty(t, prompt.Toolset.ID,
"Prompt %q must have a Toolset.ID", prompt.Prompt.Name)
// Handler must be set
assert.NotNil(t, prompt.Handler,
"Prompt %q must have a Handler", prompt.Prompt.Name)
})
}
}
// TestToolReadOnlyHintConsistency validates that read-only tools are correctly annotated
func TestToolReadOnlyHintConsistency(t *testing.T) {
tools := AllTools(stubTranslation)
for _, tool := range tools {
t.Run(tool.Tool.Name, func(t *testing.T) {
require.NotNil(t, tool.Tool.Annotations,
"Tool %q must have Annotations", tool.Tool.Name)
// Verify IsReadOnly() method matches the annotation
assert.Equal(t, tool.Tool.Annotations.ReadOnlyHint, tool.IsReadOnly(),
"Tool %q: IsReadOnly() should match Annotations.ReadOnlyHint", tool.Tool.Name)
})
}
}
// TestNoDuplicateToolNames ensures all tools have unique names
func TestNoDuplicateToolNames(t *testing.T) {
tools := AllTools(stubTranslation)
seen := make(map[string]bool)
featureFlagged := make(map[string]bool)
// get_label is intentionally in both issues and labels toolsets for conformance
// with original behavior where it was registered in both
allowedDuplicates := map[string]bool{
"get_label": true,
}
// First pass: identify tools that have feature flags (mutually exclusive at runtime)
for _, tool := range tools {
if tool.FeatureFlagEnable != "" || tool.FeatureFlagDisable != "" {
featureFlagged[tool.Tool.Name] = true
}
}
for _, tool := range tools {
name := tool.Tool.Name
// Allow duplicates for explicitly allowed tools and feature-flagged tools
if !allowedDuplicates[name] && !featureFlagged[name] {
assert.False(t, seen[name],
"Duplicate tool name found: %q", name)
}
seen[name] = true
}
}
// TestNoDuplicateResourceNames ensures all resources have unique names
func TestNoDuplicateResourceNames(t *testing.T) {
resources := AllResources(stubTranslation)
seen := make(map[string]bool)
for _, res := range resources {
name := res.Template.Name
assert.False(t, seen[name],
"Duplicate resource name found: %q", name)
seen[name] = true
}
}
// TestNoDuplicatePromptNames ensures all prompts have unique names
func TestNoDuplicatePromptNames(t *testing.T) {
prompts := AllPrompts(stubTranslation)
seen := make(map[string]bool)
for _, prompt := range prompts {
name := prompt.Prompt.Name
assert.False(t, seen[name],
"Duplicate prompt name found: %q", name)
seen[name] = true
}
}
// TestAllToolsHaveHandlerFunc ensures all tools have a handler function
func TestAllToolsHaveHandlerFunc(t *testing.T) {
tools := AllTools(stubTranslation)
for _, tool := range tools {
t.Run(tool.Tool.Name, func(t *testing.T) {
assert.NotNil(t, tool.HandlerFunc,
"Tool %q must have a HandlerFunc", tool.Tool.Name)
assert.True(t, tool.HasHandler(),
"Tool %q HasHandler() should return true", tool.Tool.Name)
})
}
}
// TestToolsetMetadataConsistency ensures tools in the same toolset have consistent descriptions
func TestToolsetMetadataConsistency(t *testing.T) {
tools := AllTools(stubTranslation)
toolsetDescriptions := make(map[inventory.ToolsetID]string)
for _, tool := range tools {
id := tool.Toolset.ID
desc := tool.Toolset.Description
if existing, ok := toolsetDescriptions[id]; ok {
assert.Equal(t, existing, desc,
"Toolset %q has inconsistent descriptions across tools", id)
} else {
toolsetDescriptions[id] = desc
}
}
}
// TestFeatureFlaggedToolsAreMutuallyExclusive validates that when multiple tools share
// the same name with different feature flags, they are properly configured to ensure:
// - At most one tool variant is active for any given feature flag state
// - A tool shows up when it should (no omissions)
// - No tool shows up when it shouldn't (no incorrect activations)
// - No duplicate tool names are active simultaneously
// This prevents issues where filtering returns the wrong variant or no variant at all.
func TestFeatureFlaggedToolsAreMutuallyExclusive(t *testing.T) {
tools := AllTools(stubTranslation)
// Group tools by name
toolsByName := make(map[string][]inventory.ServerTool)
for _, tool := range tools {
toolsByName[tool.Tool.Name] = append(toolsByName[tool.Tool.Name], tool)
}
// Check each group of tools with the same name
for name, group := range toolsByName {
if len(group) <= 1 {
continue // Single tool, no conflict possible
}
// Skip explicitly allowed duplicates (like get_label)
if name == "get_label" {
continue
}
t.Run(name, func(t *testing.T) {
// All tools with the same name must have feature flags
for i, tool := range group {
hasFlags := tool.FeatureFlagEnable != "" || tool.FeatureFlagDisable != ""
assert.True(t, hasFlags,
"Tool %q (variant %d/%d) shares a name with other tools but has no feature flags",
name, i+1, len(group))
}
// Verify mutual exclusivity: collect all flags used
enableFlags := make(map[string]bool)
disableFlags := make(map[string]bool)
for _, tool := range group {
if tool.FeatureFlagEnable != "" {
enableFlags[tool.FeatureFlagEnable] = true
}
if tool.FeatureFlagDisable != "" {
disableFlags[tool.FeatureFlagDisable] = true
}
}
// For proper mutual exclusivity, we expect:
// - Same flag name used in both FeatureFlagEnable and FeatureFlagDisable
// - This ensures only one variant is active at a time
if len(group) == 2 {
// Most common case: two variants controlled by one flag
var flagName string
for flag := range enableFlags {
flagName = flag
break
}
for flag := range disableFlags {
if flagName == "" {
flagName = flag
}
}
if flagName != "" {
assert.True(t, enableFlags[flagName] || disableFlags[flagName],
"Tools sharing name %q should use the same flag for mutual exclusivity", name)
// Verify exactly one tool has FeatureFlagEnable=flagName and one has FeatureFlagDisable=flagName
enableCount := 0
disableCount := 0
for _, tool := range group {
if tool.FeatureFlagEnable == flagName {
enableCount++
}
if tool.FeatureFlagDisable == flagName {
disableCount++
}
}
// We should have at least one of each for proper mutual exclusivity
assert.True(t, enableCount > 0 || disableCount > 0,
"Tools sharing name %q should have proper feature flag configuration", name)
}
}
// Additional safety check: ensure no two tools could be enabled simultaneously
// by testing all possible flag states
testFlagStates := []map[string]bool{
{}, // All flags off
// We'll add specific flag combinations based on what flags we found
}
// Add test cases for each unique flag
allFlags := make(map[string]bool)
for flag := range enableFlags {
allFlags[flag] = true
}
for flag := range disableFlags {
allFlags[flag] = true
}
for flag := range allFlags {
testFlagStates = append(testFlagStates, map[string]bool{flag: true})
}
// Test each flag state
for stateIdx, flagState := range testFlagStates {
enabledCount := 0
for _, tool := range group {
enabled := true
// Check FeatureFlagEnable - tool requires this flag to be ON
if tool.FeatureFlagEnable != "" {
if !flagState[tool.FeatureFlagEnable] {
enabled = false
}
}
// Check FeatureFlagDisable - tool is disabled if this flag is ON
if tool.FeatureFlagDisable != "" {
if flagState[tool.FeatureFlagDisable] {
enabled = false
}
}
if enabled {
enabledCount++
}
}
assert.LessOrEqual(t, enabledCount, 1,
"Flag state %d for tool %q: At most one variant should be enabled (found %d enabled)",
stateIdx, name, enabledCount)
}
})
}
}