rewrite phase 1

2026-07-22 23:10:23 +02:00
parent 7527831af6
commit 98ac4abca1
89 changed files with 9179 additions and 2795 deletions
@@ -0,0 +1,89 @@
+import json
+import os
+import stat
+import subprocess
+from pathlib import Path
+
+import pytest
+
+ROOT = Path(__file__).parents[1]
+
+
+def test_entrypoint_loads_secrets_writes_tea_login_and_executes_command(
+    tmp_path: Path,
+) -> None:
+    password = tmp_path / "opencode-password"
+    password.write_text("server-secret")
+    token = tmp_path / "gitea-token"
+    token.write_text("gitea-secret\n")
+    config_home = tmp_path / "config"
+    environment = {
+        **os.environ,
+        "OPENCODE_SERVER_PASSWORD_FILE": str(password),
+        "AGENTCI_GITEA_TOKEN_FILE": str(token),
+        "AGENTCI_TEA_CONFIG_HOME": str(config_home),
+        "AGENTCI_GITEA_URL": "https://gitea.example",
+    }
+
+    result = subprocess.run(
+        [
+            "/bin/sh",
+            str(ROOT / "scripts" / "entrypoint.sh"),
+            "/bin/sh",
+            "-c",
+            'printf "%s\\n" "$OPENCODE_SERVER_PASSWORD"; printf "arg=%s\\n" "$@"',
+            "child",
+            "first",
+            "second value",
+        ],
+        env=environment,
+        capture_output=True,
+        text=True,
+        timeout=10,
+        check=False,
+    )
+
+    assert result.returncode == 0, result.stderr
+    assert result.stdout.splitlines() == [
+        "server-secret",
+        "arg=first",
+        "arg=second value",
+    ]
+    config_path = config_home / "tea" / "config.yml"
+    assert json.loads(config_path.read_text()) == {
+        "logins": [
+            {
+                "name": "agentci",
+                "url": "https://gitea.example",
+                "token": "gitea-secret",
+                "default": True,
+                "version_check": False,
+            }
+        ],
+        "preferences": {},
+    }
+    assert stat.S_IMODE(config_path.stat().st_mode) == 0o600
+
+
+@pytest.mark.parametrize(
+    ("prompt", "expected"),
+    [
+        ("Username for 'https://gitea.example':", "agentci-bot\n"),
+        ("Password for 'https://agentci@gitea.example':", "token-secret\n"),
+    ],
+)
+def test_gitea_askpass_selects_credential_for_prompt(prompt: str, expected: str) -> None:
+    result = subprocess.run(
+        ["/bin/sh", str(ROOT / "scripts" / "gitea-askpass.sh"), prompt],
+        env={
+            "AGENTCI_GIT_USERNAME": "agentci-bot",
+            "AGENTCI_GIT_PASSWORD": "token-secret",
+        },
+        capture_output=True,
+        text=True,
+        timeout=10,
+        check=False,
+    )
+
+    assert result.returncode == 0, result.stderr
+    assert result.stdout == expected