Some checks failed
Test / rust-fmt-check (pull_request) Failing after 0s
Test / rust-clippy (pull_request) Failing after 1s
Test / rust-tests (pull_request) Failing after 0s
Test / frontend-typecheck (pull_request) Failing after 16s
Test / frontend-tests (pull_request) Failing after 18s
PR Review Automation / review (pull_request) Failing after 4m13s
Complete backport of all features from apollo_nxt-trcaa repository: - Three-tier shell execution safety system (Tier 1: auto, Tier 2: approve, Tier 3: deny) - Ollama function calling with tool use support - AI provider tool calling auto-detection - kubectl binary bundling and management - kubeconfig upload and context management - Shell approval modal with real-time UI - MCP protocol HTTP transport with custom headers - Enhanced security audit logging - Comprehensive test coverage (275+ tests) - Updated CI/CD workflows for Gitea Actions - Complete documentation (ADRs, wiki, release notes) Sanitization applied to all files: - Removed all MSI, Motorola, VNXT, Vesta references - Replaced internal infrastructure references with TFTSR equivalents - Updated all URLs and API endpoints - Sanitized commit history references in documentation Technical changes: - New modules: shell/classifier, shell/executor, shell/kubectl, shell/kubeconfig - Enhanced AI providers: ollama.rs, openai.rs with function calling - New Tauri commands: shell execution, kubeconfig management, tool calling detection - Database migrations: shell_execution_audit table - Frontend: ShellApprovalModal, ShellExecution, KubeconfigManager pages - CI/CD: kubectl bundling, multi-platform builds, Gitea Actions integration Version: 1.0.8 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
139 lines
4.4 KiB
TypeScript
139 lines
4.4 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import { readFileSync } from "node:fs";
|
|
import path from "node:path";
|
|
|
|
const root = process.cwd();
|
|
|
|
const readFile = (rel: string) => readFileSync(path.resolve(root, rel), "utf-8");
|
|
|
|
// ─── Dockerfiles ─────────────────────────────────────────────────────────────
|
|
|
|
describe("Dockerfile.linux-amd64", () => {
|
|
const df = readFile(".docker/Dockerfile.linux-amd64");
|
|
|
|
it("is based on the pinned Rust 1.88 slim image", () => {
|
|
expect(df).toContain("FROM rust:1.88-slim");
|
|
});
|
|
|
|
it("installs webkit2gtk 4.1 dev package", () => {
|
|
expect(df).toContain("libwebkit2gtk-4.1-dev");
|
|
});
|
|
|
|
it("installs Node.js 22 via NodeSource", () => {
|
|
expect(df).toContain("nodesource.com/setup_22.x");
|
|
expect(df).toContain("nodejs");
|
|
});
|
|
|
|
it("pre-adds the x86_64 Linux Rust target", () => {
|
|
expect(df).toContain("rustup target add x86_64-unknown-linux-gnu");
|
|
});
|
|
|
|
it("cleans apt lists to keep image lean", () => {
|
|
expect(df).toContain("rm -rf /var/lib/apt/lists/*");
|
|
});
|
|
});
|
|
|
|
describe("Dockerfile.windows-cross", () => {
|
|
const df = readFile(".docker/Dockerfile.windows-cross");
|
|
|
|
it("is based on the pinned Rust 1.88 slim image", () => {
|
|
expect(df).toContain("FROM rust:1.88-slim");
|
|
});
|
|
|
|
it("installs mingw-w64 cross-compiler", () => {
|
|
expect(df).toContain("mingw-w64");
|
|
});
|
|
|
|
it("installs nsis for Windows installer bundling", () => {
|
|
expect(df).toContain("nsis");
|
|
});
|
|
|
|
it("installs Node.js 22 via NodeSource", () => {
|
|
expect(df).toContain("nodesource.com/setup_22.x");
|
|
});
|
|
|
|
it("pre-adds the Windows GNU Rust target", () => {
|
|
expect(df).toContain("rustup target add x86_64-pc-windows-gnu");
|
|
});
|
|
|
|
it("cleans apt lists to keep image lean", () => {
|
|
expect(df).toContain("rm -rf /var/lib/apt/lists/*");
|
|
});
|
|
});
|
|
|
|
describe("Dockerfile.linux-arm64", () => {
|
|
const df = readFile(".docker/Dockerfile.linux-arm64");
|
|
|
|
it("is based on Ubuntu 22.04 (Jammy)", () => {
|
|
expect(df).toContain("FROM ubuntu:22.04");
|
|
});
|
|
|
|
it("installs aarch64 cross-compiler", () => {
|
|
expect(df).toContain("gcc-aarch64-linux-gnu");
|
|
expect(df).toContain("g++-aarch64-linux-gnu");
|
|
});
|
|
|
|
it("sets up arm64 multiarch via ports.ubuntu.com", () => {
|
|
expect(df).toContain("dpkg --add-architecture arm64");
|
|
expect(df).toContain("ports.ubuntu.com/ubuntu-ports");
|
|
expect(df).toContain("jammy");
|
|
});
|
|
|
|
it("installs arm64 webkit2gtk dev package", () => {
|
|
expect(df).toContain("libwebkit2gtk-4.1-dev:arm64");
|
|
});
|
|
|
|
it("installs Rust 1.88 with arm64 cross-compilation target", () => {
|
|
expect(df).toContain("--default-toolchain 1.88.0");
|
|
expect(df).toContain("rustup target add aarch64-unknown-linux-gnu");
|
|
});
|
|
|
|
it("adds cargo to PATH via ENV", () => {
|
|
expect(df).toContain('ENV PATH="/root/.cargo/bin:${PATH}"');
|
|
});
|
|
|
|
it("installs Node.js 22 via NodeSource", () => {
|
|
expect(df).toContain("nodesource.com/setup_22.x");
|
|
});
|
|
});
|
|
|
|
// ─── build-images.yml workflow ───────────────────────────────────────────────
|
|
|
|
describe("build-images.yml workflow", () => {
|
|
const wf = readFile(".github/workflows/build-images.yml");
|
|
|
|
it("triggers on changes to .docker/ files on main", () => {
|
|
expect(wf).toContain("- main");
|
|
expect(wf).toContain("- '.docker/**'");
|
|
});
|
|
|
|
it("supports manual workflow_dispatch trigger", () => {
|
|
expect(wf).toContain("workflow_dispatch:");
|
|
});
|
|
|
|
it("authenticates to ghcr.io before pushing", () => {
|
|
expect(wf).toContain("docker login ghcr.io");
|
|
expect(wf).toContain("--password-stdin");
|
|
expect(wf).toContain("ghcr.io");
|
|
});
|
|
|
|
it("builds and pushes all three platform images to ghcr.io", () => {
|
|
expect(wf).toContain("ghcr.io/tftsr/trcaa-linux-amd64:rust1.88-node22");
|
|
expect(wf).toContain("ghcr.io/tftsr/trcaa-windows-cross:rust1.88-node22");
|
|
expect(wf).toContain("ghcr.io/tftsr/trcaa-linux-arm64:rust1.88-node22");
|
|
});
|
|
|
|
it("runs all three build jobs on ubuntu-latest runner", () => {
|
|
const matches = wf.match(/runs-on: ubuntu-latest/g) ?? [];
|
|
expect(matches.length).toBeGreaterThanOrEqual(3);
|
|
});
|
|
|
|
it("uses GITHUB_TOKEN for registry auth", () => {
|
|
expect(wf).toContain("secrets.GITHUB_TOKEN");
|
|
});
|
|
|
|
it("grants packages write permission", () => {
|
|
expect(wf).toContain("packages: write");
|
|
});
|
|
});
|