Add full shell, replaceable Omics adapter and bilingual interaction

Implement approved specification #32 and tickets #33-#37. Keep host authentication server-verified and pin session interaction language. Compile scoped base selectors for browser compatibility and retain full gutters during CSS pruning.
2026-09-13 14:26:39 +02:00
parent 2d1b714ebe
commit d8a29bfbdd
207 changed files with 8570 additions and 2164 deletions
@@ -0,0 +1,88 @@
+//go:build linux || darwin
+
+package modelprojection
+
+import (
+	"os"
+	"path/filepath"
+	"syscall"
+	"testing"
+
+	"github.com/aritmolab/thothii/tools/tht/internal/config"
+)
+
+func TestGenerateKeepsProjectionsContainerReadableWithRestrictiveUmask(t *testing.T) {
+	installation := projectionFixture(t)
+	parentBefore, err := os.Stat(filepath.Dir(installation.Path))
+	if err != nil {
+		t.Fatal(err)
+	}
+	// This test must remain sequential: umask is process-wide.
+	previous := syscall.Umask(0o077)
+	defer syscall.Umask(previous)
+	if err := Generate(installation); err != nil {
+		t.Fatal(err)
+	}
+	assertContainerProjectionModes(t, installation)
+	parentAfter, err := os.Stat(filepath.Dir(installation.Path))
+	if err != nil || parentAfter.Mode().Perm() != parentBefore.Mode().Perm() {
+		t.Fatalf("generation changed private installation directory permissions: %v", err)
+	}
+}
+
+func TestGenerateRepairsUnreadableProjectionAsANewGeneration(t *testing.T) {
+	installation := projectionFixture(t)
+	if err := Generate(installation); err != nil {
+		t.Fatal(err)
+	}
+	before, err := os.Stat(installation.GeneratedDirectory())
+	if err != nil {
+		t.Fatal(err)
+	}
+	for path, mode := range map[string]os.FileMode{
+		installation.GeneratedDirectory():                  0o700,
+		filepath.Dir(installation.GeneratedPiModelsPath()): 0o700,
+		installation.GeneratedFrontendConfigPath():         0o600,
+	} {
+		if err := os.Chmod(path, mode); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if drift, err := Check(installation); err != nil || len(drift) == 0 {
+		t.Fatalf("unreadable projection drift = %v, %v", drift, err)
+	}
+	if err := Generate(installation); err != nil {
+		t.Fatal(err)
+	}
+	assertContainerProjectionModes(t, installation)
+	after, err := os.Stat(installation.GeneratedDirectory())
+	if err != nil || os.SameFile(before, after) {
+		t.Fatalf("permissions were not repaired through candidate publication: %v", err)
+	}
+	if drift, err := Check(installation); err != nil || len(drift) != 0 {
+		t.Fatalf("repaired projection drift = %v, %v", drift, err)
+	}
+}
+
+func assertContainerProjectionModes(t *testing.T, installation config.Installation) {
+	t.Helper()
+	for path, mode := range map[string]os.FileMode{
+		installation.GeneratedDirectory():                        0o755,
+		filepath.Dir(installation.GeneratedFrontendConfigPath()): 0o755,
+		filepath.Dir(installation.GeneratedPiModelsPath()):       0o755,
+		installation.GeneratedFrontendConfigPath():               0o644,
+		installation.GeneratedModelCatalogPath():                 0o644,
+		installation.GeneratedPiModelsPath():                     0o644,
+		installation.GeneratedPiSettingsPath():                   0o644,
+		installation.ModelProjectionComposePath():                0o644,
+	} {
+		info, err := os.Stat(path)
+		if err != nil {
+			t.Error(err)
+			continue
+		}
+		if info.Mode().Perm() != mode {
+			t.Errorf("%s mode = %04o, want %04o for container readers", path, info.Mode().Perm(), mode)
+		}
+	}
+}