claude-hdb
a10349d835
Public tool, private state. cast holds no hostnames, no bindings, no secrets: it joins a product repo's .infra/ manifest with a state directory you point it at, and makes Coolify match. Extracted from heavy-duty/infra, which was half tool and half state — the inconsistency that made it impossible to say whether "infra" named a CLI or a runbook. rig builds the boxes; cast fills them; infra is what they are filled with. Two changes were required to make it genuinely stateless and publishable: - The implicit cwd contract (environments.yaml / secrets/ / .coolify.env resolved against the working directory, silently reading the wrong file from the wrong place) is now an explicit --state <dir> / $CAST_STATE. - BANNED_IN_PROD — a hardcoded list of one product's ALLOW_* flags, the only product knowledge in the executor — becomes the generic, operator- owned environments.<env>.forbidden_var_patterns. The guard now lives in private state, so a product-side change cannot lower its own guard, and it is a pattern rather than a list, so it catches unforeseen siblings. Age identities resolve as $CAST_AGE_KEY_FILE_<ENV> then ~/.config/cast/age-<env>.key — which is the entire attended-vs-unattended apply mechanism, with no environment names known to the tool. Instance identity (org names, the GitHub App name, founder domains) is out of the fixtures and out of register-github-app.sh, which took APP_NAME and ORG as arguments rather than baking them in. 69 tests green; bin/cast + curl installer mirror rig's shape. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
46 lines
1.8 KiB
TypeScript
46 lines
1.8 KiB
TypeScript
import { describe, expect, it, vi } from "vitest";
|
|
import { CoolifyClient } from "../src/coolify.js";
|
|
|
|
function mockFetch(routes: Record<string, unknown>) {
|
|
return vi.fn(async (url: string | URL, init?: RequestInit) => {
|
|
const key = `${init?.method ?? "GET"} ${new URL(String(url)).pathname}`;
|
|
if (!(key in routes)) return new Response("not found", { status: 404 });
|
|
return new Response(JSON.stringify(routes[key]), { status: 200 });
|
|
}) as unknown as typeof fetch;
|
|
}
|
|
|
|
describe("CoolifyClient", () => {
|
|
it("sends bearer auth and resolves servers by name", async () => {
|
|
const fetchImpl = mockFetch({
|
|
"GET /api/v1/servers": [{ uuid: "srv-1", name: "prod-box" }],
|
|
});
|
|
const c = new CoolifyClient("https://coolify.test", "tok", fetchImpl);
|
|
expect(await c.serverUuid("prod-box")).toBe("srv-1");
|
|
const call = (fetchImpl as unknown as ReturnType<typeof vi.fn>).mock
|
|
.calls[0];
|
|
expect((call[1].headers as Record<string, string>).Authorization).toBe(
|
|
"Bearer tok",
|
|
);
|
|
});
|
|
it("throws a named error when a resolver misses", async () => {
|
|
const c = new CoolifyClient(
|
|
"https://coolify.test",
|
|
"tok",
|
|
mockFetch({ "GET /api/v1/servers": [] }),
|
|
);
|
|
await expect(c.serverUuid("nope")).rejects.toThrow(
|
|
/not found in Coolify: server nope/,
|
|
);
|
|
});
|
|
it("surfaces API errors with method, path and status", async () => {
|
|
const c = new CoolifyClient("https://coolify.test", "tok", mockFetch({}));
|
|
await expect(c.get("/projects")).rejects.toThrow(/GET \/projects → 404/);
|
|
});
|
|
it("reads version as plain text, not JSON", async () => {
|
|
const fetchImpl = vi.fn(
|
|
async () => new Response("4.1.2", { status: 200 }),
|
|
) as unknown as typeof fetch;
|
|
const c = new CoolifyClient("https://coolify.test", "tok", fetchImpl);
|
|
await expect(c.version()).resolves.toBe("4.1.2");
|
|
});
|
|
});
|