aboutsummaryrefslogtreecommitdiff
path: root/stdlib/source/test/lux/control/security/capability.lux
blob: 7804cda68361e19fa1bc8a8c7c3bde84b6bddedc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
(.module:
  [lux #*
   ["_" test (#+ Test)]
   [abstract
    [monad (#+ do)]]
   [control
    ["." io (#+ IO)]
    [concurrency
     ["." promise]]]
   [math
    ["." random]
    [number
     ["n" nat]]]]
  {1
   ["." /]})

(/.capability: (Can-Shift a)
  (can-shift [a Nat] [a Nat]))

(/.capability: Can-IO
  (can-io [] (IO Nat)))

(def: #export test
  Test
  (<| (_.covering /._)
      (do random.monad
        [shift random.nat
         base random.nat
         #let [expected (n.+ shift base)]
         pass-through (random.ascii 1)]
        (_.for [/.Capability]
               ($_ _.and
                   (_.cover [/.capability: /.use]
                            (let [capability (..can-shift (function (_ [no-op raw])
                                                            [no-op (n.+ shift raw)]))
                                  [untouched actual] (/.use capability [pass-through base])]
                              (and (is? pass-through untouched)
                                   (n.= expected actual))))
                   (wrap (let [capability (..can-io (function (_ _) (io.io expected)))]
                           (do promise.monad
                             [actual (/.use (/.async capability) [])]
                             (_.cover' [/.async]
                                       (n.= expected actual)))))
                   )))))