108 lines
5.7 KiB
JavaScript
108 lines
5.7 KiB
JavaScript
import assert from 'node:assert/strict'
|
|
import fs from 'node:fs'
|
|
import path from 'node:path'
|
|
import test from 'node:test'
|
|
import { fileURLToPath } from 'node:url'
|
|
|
|
const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
|
|
const readJson = (relative) => JSON.parse(fs.readFileSync(path.join(root, relative), 'utf8'))
|
|
const readText = (relative) => fs.readFileSync(path.join(root, relative), 'utf8')
|
|
|
|
const foundation = readJson('foundation.json')
|
|
const trust = readJson('src-tauri/release-trust.json')
|
|
const tauriConfig = readJson('src-tauri/tauri.conf.json')
|
|
const capability = readJson('src-tauri/capabilities/default.json')
|
|
const broadcast = readJson('contracts/release-broadcast.schema.json')
|
|
const stageOne = readJson('contracts/stage-one-platform.json')
|
|
const publicRoute = readJson('server/release-broadcast/public-route.json')
|
|
|
|
test('clean Tauri foundation contains no inherited product updater endpoint', () => {
|
|
assert.deepEqual(foundation.upstream_product_update_endpoints, [])
|
|
assert.deepEqual(trust.endpoints, [])
|
|
assert.deepEqual(trust.allowedReleaseHosts, [])
|
|
assert.equal(trust.state, 'UNPROVISIONED_FAIL_CLOSED')
|
|
assert.equal(trust.publicKey, '')
|
|
for (const relative of [
|
|
'foundation.json',
|
|
'src-tauri/release-trust.json',
|
|
'src-tauri/tauri.conf.json',
|
|
'src-tauri/src/release_trust.rs',
|
|
]) {
|
|
const source = readText(relative)
|
|
assert.doesNotMatch(source, /refactoringhq|tolaria|outline/i)
|
|
}
|
|
assert.equal(publicRoute.releaseEndpoint, 'https://guanghulab.com/hololake/releases/latest.json')
|
|
assert.equal(publicRoute.allowedMethods.join(','), 'GET,HEAD')
|
|
assert.equal(publicRoute.requestBodyAllowed, false)
|
|
assert.equal(publicRoute.automaticUpload, false)
|
|
assert.equal(publicRoute.automaticActivation, false)
|
|
})
|
|
|
|
test('release activation remains explicitly human controlled', () => {
|
|
assert.equal(trust.automaticCheckOnStartup, false)
|
|
assert.equal(trust.automaticDownload, false)
|
|
assert.equal(trust.humanOptInInstallRequired, true)
|
|
assert.equal(trust.automaticRestart, false)
|
|
assert.equal(foundation.automatic_update_check_on_startup, false)
|
|
assert.equal(foundation.human_opt_in_download_install_required, true)
|
|
assert.equal(foundation.automatic_restart_allowed, false)
|
|
assert.equal(foundation.release_manual_check_runtime_implemented, true)
|
|
assert.equal(foundation.release_candidate_human_confirmation_runtime_implemented, true)
|
|
assert.equal(foundation.release_package_signature_size_sha256_verification_implemented, true)
|
|
assert.equal(foundation.release_persistent_rollback_executor_implemented, true)
|
|
assert.equal(foundation.release_signed_notarized_pipeline_implemented, true)
|
|
assert.equal(foundation.release_broadcast_candidate_service_implemented, true)
|
|
assert.equal(foundation.release_broadcast_candidate_service_default_state, 'EMPTY_FAIL_CLOSED_LOOPBACK_ONLY')
|
|
assert.equal(foundation.release_broadcast_explicit_operator_activation_implemented, true)
|
|
assert.equal(foundation.release_broadcast_activation_requires_exact_human_approval, true)
|
|
assert.equal(foundation.release_broadcast_activation_requires_repeated_expected_facts, true)
|
|
assert.equal(foundation.release_broadcast_operator_automatic_restart_allowed, false)
|
|
assert.equal(foundation.release_public_path_prefix, '/hololake/releases')
|
|
assert.equal(foundation.release_public_route_deployed, false)
|
|
assert.equal(publicRoute.publicPathPrefix, foundation.release_public_path_prefix)
|
|
assert.equal(publicRoute.proxyRequestUriPolicy, 'PRESERVE_FULL_PUBLIC_PATH')
|
|
assert.equal(publicRoute.frontDoorLoopbackPort, null)
|
|
assert.equal(publicRoute.deployed, false)
|
|
assert.equal(foundation.release_pipeline_automatic_upload_allowed, false)
|
|
assert.equal(
|
|
foundation.release_production_activation_state,
|
|
'BLOCKED_PENDING_PUBLIC_HTTPS_TRUST_UPDATER_KEY_PIPELINE_EXECUTION_AND_APPLE_NOTARIZATION',
|
|
)
|
|
})
|
|
|
|
test('unprovisioned builds cannot emit updater artifacts or expose updater IPC', () => {
|
|
assert.equal(tauriConfig.bundle.createUpdaterArtifacts, false)
|
|
assert.equal(foundation.tauri_update_artifacts_enablement_gate, 'JD_CONTROLLER_PUBLIC_KEY_AND_SIGNED_RELEASE_PIPELINE_REQUIRED')
|
|
assert.deepEqual(capability.permissions, ['core:default'])
|
|
assert.equal(capability.permissions.includes('updater:default'), false)
|
|
})
|
|
|
|
test('broadcast remains Tauri-compatible and carries HoloLake human metadata', () => {
|
|
const platform = broadcast.properties.platforms.additionalProperties
|
|
assert.equal(platform.required.includes('signature'), true)
|
|
assert.equal(platform.required.includes('url'), true)
|
|
assert.equal(broadcast.required.includes('pub_date'), true)
|
|
assert.equal(broadcast.required.includes('publishedAt'), false)
|
|
assert.equal(broadcast.required.includes('notes'), true)
|
|
assert.equal(broadcast.required.includes('hololake'), true)
|
|
assert.equal(
|
|
broadcast.properties.hololake.properties.restart.properties.automaticAllowed.const,
|
|
false,
|
|
)
|
|
})
|
|
|
|
test('stage one is an AI operating platform while five domains remain hidden foundation', () => {
|
|
assert.equal(foundation.first_public_product, 'GH-AIOS_GENERAL_AI_OPERATING_PLATFORM')
|
|
assert.equal(foundation.visible_five_domain_navigation_in_stage_one, false)
|
|
assert.equal(stageOne.five_domain_primary_navigation_visible, false)
|
|
assert.ok(stageOne.human_surface.includes('HUMAN_APPROVAL_CENTER'))
|
|
assert.ok(stageOne.modules.includes('EVENT_AND_LAKE_LAMP'))
|
|
})
|
|
|
|
test('stage one separates realtime, Git, knowledge and model reasoning boundaries', () => {
|
|
assert.equal(stageOne.git_is_realtime_transport, false)
|
|
assert.equal(stageOne.knowledge_projection_is_authority_source, false)
|
|
assert.equal(stageOne.hidden_model_reasoning_collection_allowed, false)
|
|
assert.equal(stageOne.exact_host_compaction_prediction_claimed, false)
|
|
assert.equal(stageOne.implementation_complete, false)
|
|
})
|