mptyl/ThothII
1
0
Fork 0
Code Issues 25 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix(auth): close Task 15 review round two

Browse Source
This commit is contained in:
marcopan
2026-08-18 07:21:24 +02:00
parent 225ffc8e20
commit fe190e7046
10 changed files with 305 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/unified-deployment-smoke.sh
+22 -1
View File
@@ -986,9 +986,30 @@ task13_core_id() {
}
task13_assert_maintenance_auth_isolation() {
local rendered
rendered="$TASK13_TMP/maintenance-auth-isolation.json"
if ! task13_compose config --format json >"$rendered" 2>>"$TASK13_LOG"; then
task13_log_failure "render workspace maintenance mount isolation"
fi
node - "$rendered" <<'NODE'
const config = JSON.parse(require("node:fs").readFileSync(process.argv[2], "utf8"));
const maintenance = config.services?.["workspace-maintenance"];
if (!maintenance || !Array.isArray(maintenance.volumes)) process.exit(1);
if (maintenance.volumes.some((mount) => mount?.target === "/run/thothii-auth" || mount?.target === "/data/auth")) {
process.exit(1);
}
NODE
task13_compose_logged "seed core authentication isolation sentinel" exec -T core sh -ceu \
': > /data/auth/task13-maintenance-isolation-sentinel'
task13_compose_logged "workspace maintenance auth isolation" \
--profile workspace-maintenance run --rm --no-deps --entrypoint sh workspace-maintenance -ceu \
'test ! -e /run/thothii-auth && test ! -e /data/auth'
'test ! -e /run/thothii-auth
test -d /data/auth
test ! -e /data/auth/task13-maintenance-isolation-sentinel'
task13_compose_logged "verify core authentication isolation sentinel" exec -T core sh -ceu \
'test -f /data/auth/task13-maintenance-isolation-sentinel'
task13_compose_logged "remove core authentication isolation sentinel" exec -T core sh -ceu \
'rm -f /data/auth/task13-maintenance-isolation-sentinel'
}
task13_assert_local_auth_lifecycle() {