feat: enforce v02 runtime authority

2026-05-29 08:10:19 +08:00
parent bc816cea4b
commit b99c663614
18 changed files with 461 additions and 144 deletions
@@ -70,6 +70,14 @@ test("v02 render follows TypeScript runtime checks and does not self-patch boots
      assert.doesNotMatch(workloads, new RegExp(serviceId, "u"));
      assert.doesNotMatch(services, new RegExp(serviceId, "u"));
    }
+    assert.match(workloads, /"name": "HWLAB_ACCESS_CONTROL_REQUIRED"[\s\S]{0,80}"value": "1"/u);
+    assert.match(workloads, /"name": "HWLAB_BOOTSTRAP_ADMIN_PASSWORD_HASH"/u);
+    assert.match(workloads, /"name": "hwlab-v02-bootstrap-admin"/u);
+    assert.doesNotMatch(workloads, /HWLAB_GATEWAY_SIMU_URL/u);
+    assert.doesNotMatch(workloads, /HWLAB_BOX_SIMU_URL/u);
+    assert.doesNotMatch(workloads, /HWLAB_PATCH_PANEL_URL/u);
+    assert.doesNotMatch(workloads, /HWLAB_ROUTER_URL/u);
+    assert.doesNotMatch(workloads, /HWLAB_TUNNEL_CLIENT_URL/u);

    assert.doesNotMatch(pipeline, /hwlab-gateway-simu-status/u);
    assert.match(pipeline, /hwlab-cloud-api-status/u);