Mechanical, semantics-preserving cleanup so the codebase passes the new lint stage:
- ruff format: all 32 Python files (wraps long signatures, normalizes quotes/blank lines).
- nixpkgs-fmt: modules/drone-runner.nix.
- shfmt (-i 2 -ci): scripts/*.sh.
Lint fixes (reviewed, behavior-preserving — no test weakened):
- ruff SIM105: try/except-pass -> contextlib.suppress (abra.py app_config rm; lifecycle.py janitor).
- ruff SIM115: open().read() -> with open() (run_recipe_ci.py redaction-values + gitea-token).
- statix: merge repeated sops `secrets.*` keys into one `secrets = { ... }` (comments kept);
empty fn pattern `{ ... }:` -> `_:` (packages.nix).
- deadnix: drop unused lambda args (flake `self`; configuration.nix `lib`; overlay `final` -> `_`).
Verified on cc-ci: `scripts/lint.sh` -> lint: PASS; nixosConfigurations.cc-ci evaluates;
all Python byte-compiles. The deployed bridge/dashboard/runner source changes hash (reformat),
so cc-ci will be rebuilt to the new closure in W2 before the cold D1-D10 re-verification.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
39 lines
1.6 KiB
Python
39 lines
1.6 KiB
Python
"""lasuite-docs — install stage (recipe #5, multi-service + object-storage/S3). D2 install: the
|
|
multi-service stack (frontend + Django backend + celery + y-provider + docspec + postgres + redis +
|
|
minio + nginx) converges and serves the app over real HTTPS through the gateway.
|
|
|
|
Login is OIDC-gated (no live OIDC provider in CI), so the functional assertion is that the frontend
|
|
SPA is served (unauthenticated landing), not an authenticated flow."""
|
|
|
|
import os
|
|
import sys
|
|
|
|
sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner"))
|
|
from harness import lifecycle # noqa: E402
|
|
|
|
|
|
def test_http_reachable(deployed_app):
|
|
status = lifecycle.http_get(deployed_app, "/")
|
|
assert status in (200, 301, 302), f"expected 2xx/3xx from {deployed_app}, got {status}"
|
|
|
|
|
|
def test_playwright_loads_frontend(deployed_app):
|
|
"""A real browser loads the live Docs frontend (the SPA shell) over HTTPS."""
|
|
from playwright.sync_api import sync_playwright
|
|
|
|
url = f"https://{deployed_app}/"
|
|
with sync_playwright() as p:
|
|
browser = p.chromium.launch(args=["--no-sandbox"])
|
|
try:
|
|
ctx = browser.new_context(ignore_https_errors=True)
|
|
page = ctx.new_page()
|
|
resp = page.goto(url, wait_until="domcontentloaded", timeout=60000)
|
|
assert resp is not None and resp.status in (
|
|
200,
|
|
301,
|
|
302,
|
|
), f"page status {resp and resp.status}"
|
|
assert "<html" in page.content().lower(), "no HTML served by the frontend"
|
|
finally:
|
|
browser.close()
|