Files

65 lines
3.5 KiB
JavaScript

#!/usr/bin/env node
// Runs every verifier in sequence and aggregates; CI's entry point after building. --require-signed/--strict harden the signature/network gates. Exit 0 iff all pass.
'use strict';
const path = require('path');
const { spawnSync } = require('child_process');
function parseArgs(argv) {
const out = { app: null, requireSigned: false, strict: false };
for (let i = 0; i < argv.length; i++) {
if (argv[i] === '--app') out.app = argv[++i];
else if (argv[i] === '--require-signed') out.requireSigned = true;
else if (argv[i] === '--strict') out.strict = true;
}
return out;
}
function run(label, script, extra) {
process.stdout.write(`\n${'='.repeat(64)}\n== ${label}\n${'='.repeat(64)}\n`);
const r = spawnSync(process.execPath, [path.join(__dirname, script), ...extra], { stdio: 'inherit' });
return r.status === 0;
}
function main() {
const args = parseArgs(process.argv.slice(2));
const appArg = args.app ? ['--app', args.app] : [];
const steps = [
// Pure-logic gates run first - cheap, no build needed, fail fast.
['preflight selftest (Layer 1+2: unit + hang fuzz)', 'selftest-preflight.js', []],
['preflight rigs (Layer 3: failure simulators)', 'verify-preflight-rigs.js', []],
['preflight race (Layer 4: parallel + cache)', 'verify-preflight-race.js', []],
['preflight matrix (Layer 5: hostile-env scenario)', 'verify-preflight.js', []],
['pairwise generator selftest (covering array math)', 'selftest-pairwise.js', []],
['packaging parity (Win+Mac stage the same dirs)', 'verify-packaging-parity.js', []],
['deps fully pinned (reproducible backend builds)', 'verify-deps-pinned.js', []],
['no build-host paths leaked into the artifact', 'verify-host-leakage.js', appArg],
['locale paks shipped (empty --lang -> Blink null-deref crash)', 'verify-locale-paks.js', appArg],
['native modules match the target arch (no x86_64 .node in an arm64 app)', 'verify-native-arch.js', appArg],
['9router deps shipped (else subscription service hangs)', 'verify-router-deps.js', appArg],
['bundled python runs (--version + import smoke)', 'verify-python-health.js', appArg],
['MCP bundles answer initialize over stdio', 'verify-mcp-bundles.js', appArg],
['update feed sha512 matches files on disk', 'verify-update-feed.js', []],
// App-launching gates.
['boot / paint / serve / provenance', 'verify-packaged-app.js', appArg],
['code-signing state', 'verify-signature.js', [...(args.app ? ['--target', args.app] : []), ...(args.requireSigned ? ['--require-signed'] : [])]],
['resilience (locked-port + multi-instance)', 'verify-resilience.js', appArg],
['network / auth / 9router', 'verify-network.js', [...appArg, ...(args.strict ? ['--strict'] : [])]],
['9router actually routes (functional GET /api/providers)', 'verify-9router-functional.js', appArg],
['clean-profile invariant (CI-only; wipes data dir)', 'verify-clean-profile.js', appArg],
['boot beacon + preflight', 'verify-boot-beacon.js', appArg],
['real agent turn (opt-in: OPENSWARM_E2E_AGENT=1)', 'verify-agent-turn.js', appArg],
];
const results = steps.map(([label, script, extra]) => [label, run(label, script, extra)]);
process.stdout.write(`\n${'='.repeat(64)}\n== SUMMARY\n${'='.repeat(64)}\n`);
let allOk = true;
for (const [label, ok] of results) { process.stdout.write(` ${ok ? 'PASS' : 'FAIL'} ${label}\n`); if (!ok) allOk = false; }
process.stdout.write('\n');
process.exit(allOk ? 0 : 1);
}
main();