Andy Dixon
9eb873cbe6
Phase 9. Goals form a mind-scoped tree with kind, priority, progress and blockers; their deterministic relevance to a candidate feeds the goal_relevance attention feature and a goal monitor raises stalled goals and observations that touch one. Drives are a closed set of eight scalars with operator-configured ranges and personality-derived baselines; there is no self-preservation, replication or acquisition drive and no way to add one at runtime. Affect is ten scalars moved by an explicit rule table over events and decaying towards baseline; both modulate attention weights each cycle and the effective weights are recorded with every cycle and shown beside the configured ones. Predictions carry a window and machine-checkable criteria (event terms occurring or staying absent, a belief reaching a confidence, or operator judgement). A resolver job judges them deterministically, keeps an append-only outcome history for calibration (accuracy, Brier score, confidence buckets, overconfidence flag), emits prediction_error events scaled by how confident the miss was, and feeds the outcome back into the linked belief as evidence. Causal hypotheses derive predictions automatically. Curiosity turns misses, contradictions and unexplained observations into questions that compete for attention and become investigation goals when admitted. Brain gains after-cycle hooks and goal/motivation state. API, UI (goals, prediction dashboard, cognitive state panel, effective weights) and CLI (goal, prediction, state). Demo scenario 4 verified end to end.
102 lines
4.3 KiB
Go
102 lines
4.3 KiB
Go
package api
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"log/slog"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/andydixon/noema/internal/app"
|
|
"github.com/andydixon/noema/internal/audit"
|
|
"github.com/andydixon/noema/internal/auth"
|
|
"github.com/andydixon/noema/internal/beliefs"
|
|
"github.com/andydixon/noema/internal/brain"
|
|
"github.com/andydixon/noema/internal/config"
|
|
"github.com/andydixon/noema/internal/conversation"
|
|
evstore "github.com/andydixon/noema/internal/events"
|
|
"github.com/andydixon/noema/internal/goals"
|
|
"github.com/andydixon/noema/internal/llm/prompts"
|
|
"github.com/andydixon/noema/internal/llm/router"
|
|
"github.com/andydixon/noema/internal/memory"
|
|
"github.com/andydixon/noema/internal/minds"
|
|
"github.com/andydixon/noema/internal/motivation"
|
|
"github.com/andydixon/noema/internal/observability"
|
|
"github.com/andydixon/noema/internal/predictions"
|
|
"github.com/andydixon/noema/internal/scheduler"
|
|
"github.com/andydixon/noema/internal/security/secrets"
|
|
"github.com/andydixon/noema/internal/storage"
|
|
"github.com/andydixon/noema/migrations"
|
|
)
|
|
|
|
func testServer(t *testing.T) (*httptest.Server, string) {
|
|
t.Helper()
|
|
pool := storage.TestPool(t, migrations.FS)
|
|
cfg := config.Defaults()
|
|
cfg.DatabaseURL = "postgres://test"
|
|
log := slog.New(slog.DiscardHandler)
|
|
sec, _ := secrets.New("")
|
|
llmStore := router.NewStore(pool)
|
|
deps := app.Deps{Config: cfg, Log: log, DB: pool, Auth: auth.NewService(pool, time.Hour, 2*time.Hour), Secrets: sec, LLMStore: llmStore,
|
|
LLM: router.NewRouter(llmStore, sec, log, nil, 2), Prompts: prompts.NewStore(pool),
|
|
Audit: audit.New(pool, log), Metrics: observability.NewMetrics(), Minds: minds.NewStore(pool), Conversations: conversation.NewStore(pool), Goals: goals.NewStore(pool), Motivation: motivation.NewStore(pool), Predictions: predictions.NewStore(pool), Beliefs: beliefs.NewStore(pool), Memory: memory.NewStore(context.Background(), pool, nil), Events: evstore.NewStore(pool, evstore.NewBus(50), nil), Migrations: migrations.FS, Started: time.Now()}
|
|
ctx := context.Background()
|
|
deps.Resolver = &predictions.Resolver{Store: deps.Predictions, Events: deps.Events, Beliefs: deps.Beliefs, Log: log}
|
|
group := scheduler.NewGroup(ctx, log)
|
|
t.Cleanup(func() { group.Stop() })
|
|
deps.Brain = brain.NewManager(brain.Config{DB: pool, Events: deps.Events, Minds: deps.Minds, Registry: brain.NewRegistry(), Pool: scheduler.NewPool(2), Log: log, Metrics: deps.Metrics}, group)
|
|
u, err := deps.Auth.CreateUser(ctx, "admin", "administrator-pass", auth.RoleAdministrator)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
tok, _ := deps.Auth.CreateAPIToken(ctx, u.ID, "t", nil)
|
|
srv := httptest.NewServer(New(deps, nil).Handler())
|
|
t.Cleanup(srv.Close)
|
|
return srv, tok
|
|
}
|
|
|
|
func TestStatusAuthAndErrorEnvelope(t *testing.T) {
|
|
srv, tok := testServer(t)
|
|
res, _ := http.Get(srv.URL + "/api/v1/system/status")
|
|
if res.StatusCode != 401 {
|
|
t.Fatalf("expected 401, got %d", res.StatusCode)
|
|
}
|
|
var e ErrorBody
|
|
json.NewDecoder(res.Body).Decode(&e) //nolint:errcheck
|
|
if e.Error.Code != "unauthenticated" || e.Error.RequestID == "" {
|
|
t.Fatalf("bad error envelope: %+v", e)
|
|
}
|
|
req, _ := http.NewRequest("GET", srv.URL+"/api/v1/system/status", nil)
|
|
req.Header.Set("Authorization", "Bearer "+tok)
|
|
res, _ = http.DefaultClient.Do(req)
|
|
if res.StatusCode != 200 {
|
|
t.Fatalf("expected 200, got %d", res.StatusCode)
|
|
}
|
|
var st SystemStatus
|
|
json.NewDecoder(res.Body).Decode(&st) //nolint:errcheck
|
|
if !st.Database.OK || len(st.Migrations) == 0 {
|
|
t.Fatalf("status incomplete: %+v", st)
|
|
}
|
|
if res.Header.Get("Content-Security-Policy") == "" {
|
|
t.Fatal("missing CSP header")
|
|
}
|
|
|
|
// Unknown JSON fields and body limits are rejected as 400.
|
|
req, _ = http.NewRequest("POST", srv.URL+"/api/v1/users", strings.NewReader(`{"username":"x","password":"long-enough-pass","role":"observer","bogus":1}`))
|
|
req.Header.Set("Authorization", "Bearer "+tok)
|
|
res, _ = http.DefaultClient.Do(req)
|
|
if res.StatusCode != 400 {
|
|
t.Fatalf("expected 400 for unknown field, got %d", res.StatusCode)
|
|
}
|
|
// Bearer requests are exempt from CSRF but still role-checked.
|
|
req, _ = http.NewRequest("POST", srv.URL+"/api/v1/users", strings.NewReader(`{"username":"obs","password":"long-enough-pass","role":"observer"}`))
|
|
req.Header.Set("Authorization", "Bearer "+tok)
|
|
res, _ = http.DefaultClient.Do(req)
|
|
if res.StatusCode != 201 {
|
|
t.Fatalf("expected 201, got %d", res.StatusCode)
|
|
}
|
|
}
|