feat: establish native desktop update trust root

This commit is contained in:
冰朔 2026-08-12 10:29:00 +08:00
commit cff488bb03
29 changed files with 8485 additions and 60 deletions

View file

@ -21,7 +21,7 @@ test("HoloLake has one clean canonical desktop destination", () => {
assert.equal(shell.decision.canonical_source, "product-source/hololake-native-desktop");
assert.equal(
shell.decision.canonical_source_state,
"FOUNDATION_ROOT_CREATED_TAURI_SCAFFOLD_PENDING",
"MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
);
assert.equal(
shell.decision.existing_tauri_role,
@ -85,14 +85,22 @@ test("HoloLake owns an opt-in signed update route", () => {
assert.deepEqual(foundation.upstream_product_update_endpoints, []);
assert.equal(foundation.production_update_endpoint_owner, "HOLOLAKE_ONLY");
assert.equal(foundation.private_signing_material_allowed_in_source, false);
assert.equal(broadcastSchema.properties.restart.properties.required.const, true);
assert.equal(broadcastSchema.properties.restart.properties.automaticAllowed.const, false);
assert.equal(
broadcastSchema.properties.hololake.properties.restart.properties.required.const,
true,
);
assert.equal(
broadcastSchema.properties.hololake.properties.restart.properties.automaticAllowed.const,
false,
);
assert.match(
broadcastSchema.properties.platforms.additionalProperties.properties.url.pattern,
/^\^https:/,
);
assert.equal(
broadcastSchema.properties.platforms.additionalProperties.required.includes("tauriSignature"),
broadcastSchema.properties.platforms.additionalProperties.required.includes("signature"),
true,
);
assert.equal(broadcastSchema.required.includes("pub_date"), true);
assert.equal(broadcastSchema.required.includes("publishedAt"), false);
});