mirror of
https://github.com/github/spec-kit.git
synced 2026-08-03 06:26:30 +08:00
* fix(bundle): resolve file:// download_url via the file-URL helper _download_manifest built the local path from raw parsed.path, which keeps the leading slash of file:///C:/x (yielding a \C:\x path that never exists on Windows) and skips percent-decoding (my%20bundles stays encoded on every OS) — so a catalog entry whose download_url is the canonical URI Python itself produces via Path.as_uri() always fails with 'Bundle manifest not found'. Route the file scheme through the existing bundler.services.adapters._file_url_to_path helper, which already handles drive letters, UNC hosts, and percent-decoding for catalog file:// URLs (make_catalog_fetcher). The bare-path branch is unchanged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(bundle): reject file:// / local download_url; catalog URLs are HTTPS-only Per maintainer review (route B): file:// in a catalog download_url was never intended — catalog URLs are HTTPS-only (http for localhost) across the extensions/presets/workflows catalog systems, and disk installs go through the positional path (specify bundle install <path>), handled by _local_manifest_source before catalog resolution. Remove the file:///bare-path branch from _download_manifest and route everything through _download_remote_manifest (HTTPS-only via _require_https), with an actionable error pointing at the positional install. Invert the file:// tests to assert rejection (+ a positional-path resolution test), and migrate the three bundle-info contract tests off local download_urls onto an HTTPS-only entry with a mocked manifest fetch. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(bundle): validate HTTPS before the offline gate in _download_manifest Per review: for a non-local download_url the offline check ran before any URL validation, so an invalid/non-HTTPS scheme surfaced a misleading 'Network access disabled' error under --offline when the real problem is the URL would be rejected even online. Call _require_https before the offline gate so the correct error is reported in every mode. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(bundle): reword non-HTTPS download_url error to not mislabel scheme-less URLs A scheme-less download_url (urlparse scheme == "") can be a bare filesystem path OR a missing-scheme value like 'example.com/foo.zip', not necessarily file://. Reword the reject error to state the real HTTPS-only constraint and enumerate what is rejected (file://, local path, scheme-less), instead of labeling every case 'local/file://'. Behavior unchanged; the 'bundle install' actionable hint is preserved, so the existing reject-path tests still pass. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
174 lines
6.1 KiB
Python
174 lines
6.1 KiB
Python
"""Tests for installing a bundle from a local artifact/path (T045).
|
|
|
|
The resolution-level tests are pure; the end-to-end test installs the bundled
|
|
``agent-context`` extension fully offline from a built ``.zip`` artifact,
|
|
proving the real in-process primitive dispatch (T044) works without a network.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
import yaml
|
|
from typer.testing import CliRunner
|
|
|
|
from specify_cli import app
|
|
from specify_cli.bundler import BundlerError
|
|
from specify_cli.commands.bundle import _local_manifest_source
|
|
from tests.bundler_helpers import make_project, valid_manifest_dict, write_manifest
|
|
|
|
|
|
def test_local_source_none_for_non_path():
|
|
assert _local_manifest_source("some-catalog-bundle-id") is None
|
|
|
|
|
|
def test_local_source_from_directory(tmp_path: Path):
|
|
write_manifest(tmp_path, valid_manifest_dict())
|
|
manifest = _local_manifest_source(str(tmp_path))
|
|
assert manifest is not None
|
|
assert manifest.bundle.id == "demo-bundle"
|
|
|
|
|
|
def test_local_source_from_bundle_yml(tmp_path: Path):
|
|
path = write_manifest(tmp_path, valid_manifest_dict())
|
|
manifest = _local_manifest_source(str(path))
|
|
assert manifest is not None
|
|
assert manifest.bundle.id == "demo-bundle"
|
|
|
|
|
|
def test_local_source_from_zip_artifact(tmp_path: Path):
|
|
bundle_dir = tmp_path / "bundle"
|
|
bundle_dir.mkdir()
|
|
write_manifest(bundle_dir, valid_manifest_dict())
|
|
(bundle_dir / "README.md").write_text("# demo\n", encoding="utf-8")
|
|
|
|
runner = CliRunner()
|
|
result = runner.invoke(app, ["bundle", "build", "--path", str(bundle_dir)])
|
|
assert result.exit_code == 0, result.output
|
|
artifact = next(bundle_dir.glob("*.zip"))
|
|
|
|
manifest = _local_manifest_source(str(artifact))
|
|
assert manifest is not None
|
|
assert manifest.bundle.id == "demo-bundle"
|
|
|
|
|
|
def test_local_source_rejects_unknown_file(tmp_path: Path):
|
|
weird = tmp_path / "thing.txt"
|
|
weird.write_text("nope", encoding="utf-8")
|
|
with pytest.raises(BundlerError, match="not a recognised bundle source"):
|
|
_local_manifest_source(str(weird))
|
|
|
|
|
|
def test_install_bundled_extension_from_zip_offline(tmp_path: Path):
|
|
"""End-to-end: build → install (offline, local .zip) → list → remove."""
|
|
project = make_project(tmp_path / "proj")
|
|
|
|
bundle_dir = tmp_path / "mini"
|
|
bundle_dir.mkdir()
|
|
(bundle_dir / "bundle.yml").write_text(
|
|
yaml.safe_dump(
|
|
{
|
|
"schema_version": "1.0",
|
|
"bundle": {
|
|
"id": "mini",
|
|
"name": "Mini",
|
|
"version": "1.0.0",
|
|
"role": "developer",
|
|
"description": "minimal",
|
|
"author": "tests",
|
|
"license": "MIT",
|
|
},
|
|
"requires": {"speckit_version": ">=0.1.0"},
|
|
"provides": {
|
|
"extensions": [{"id": "agent-context", "version": "1.0.0"}]
|
|
},
|
|
}
|
|
),
|
|
encoding="utf-8",
|
|
)
|
|
(bundle_dir / "README.md").write_text("# Mini\n", encoding="utf-8")
|
|
|
|
runner = CliRunner()
|
|
previous = Path.cwd()
|
|
os.chdir(project)
|
|
try:
|
|
build = runner.invoke(app, ["bundle", "build", "--path", str(bundle_dir)])
|
|
assert build.exit_code == 0, build.output
|
|
artifact = next(bundle_dir.glob("*.zip"))
|
|
|
|
install = runner.invoke(app, ["bundle", "install", str(artifact), "--offline"])
|
|
assert install.exit_code == 0, install.output
|
|
|
|
from specify_cli.extensions import ExtensionManager
|
|
|
|
assert ExtensionManager(project).registry.is_installed("agent-context")
|
|
|
|
listing = runner.invoke(app, ["bundle", "list"])
|
|
assert "mini" in listing.output
|
|
|
|
remove = runner.invoke(app, ["bundle", "remove", "mini"])
|
|
assert remove.exit_code == 0, remove.output
|
|
assert not ExtensionManager(project).registry.is_installed("agent-context")
|
|
finally:
|
|
os.chdir(previous)
|
|
|
|
|
|
def test_download_manifest_rejects_file_url(tmp_path: Path):
|
|
"""A catalog ``file://`` download_url is rejected — catalog URLs are
|
|
HTTPS-only, matching extensions/presets/workflows. Disk installs go through
|
|
the positional path (see the local-source tests above), not download_url.
|
|
"""
|
|
from types import SimpleNamespace
|
|
|
|
from specify_cli.commands.bundle import _download_manifest
|
|
|
|
manifest_path = write_manifest(tmp_path / "my bundles")
|
|
resolved = SimpleNamespace(
|
|
entry=SimpleNamespace(id="demo-bundle", download_url=manifest_path.as_uri())
|
|
)
|
|
|
|
with pytest.raises(BundlerError, match="bundle install"):
|
|
_download_manifest(resolved, offline=True)
|
|
|
|
|
|
def test_download_manifest_rejects_bare_path(tmp_path: Path):
|
|
"""A bare filesystem path download_url is likewise rejected."""
|
|
from types import SimpleNamespace
|
|
|
|
from specify_cli.commands.bundle import _download_manifest
|
|
|
|
manifest_path = write_manifest(tmp_path / "plain")
|
|
resolved = SimpleNamespace(
|
|
entry=SimpleNamespace(id="demo-bundle", download_url=str(manifest_path))
|
|
)
|
|
|
|
with pytest.raises(BundlerError, match="bundle install"):
|
|
_download_manifest(resolved, offline=True)
|
|
|
|
|
|
def test_local_install_still_resolves_via_positional_path(tmp_path: Path):
|
|
"""The supported local route — a positional path, not a download_url —
|
|
still resolves the manifest via _local_manifest_source."""
|
|
manifest_path = write_manifest(tmp_path / "my bundles")
|
|
manifest = _local_manifest_source(str(manifest_path))
|
|
assert manifest is not None
|
|
assert manifest.bundle.id == "demo-bundle"
|
|
|
|
|
|
def test_download_manifest_rejects_non_https_url_even_offline(tmp_path: Path):
|
|
"""A non-HTTPS download_url must report the HTTPS problem, not a misleading
|
|
'Network access disabled', even under --offline (scheme is validated before
|
|
the offline gate)."""
|
|
from types import SimpleNamespace
|
|
|
|
from specify_cli.commands.bundle import _download_manifest
|
|
|
|
resolved = SimpleNamespace(
|
|
entry=SimpleNamespace(
|
|
id="demo-bundle", download_url="http://example.com/bundle.zip"
|
|
)
|
|
)
|
|
with pytest.raises(BundlerError, match="HTTPS"):
|
|
_download_manifest(resolved, offline=True)
|