feat: implement TASK-WP0-09 packaging

2026-07-28 00:55:18 +08:00
parent 361bda2f22
commit 2c5c1a5005
13 changed files with 600 additions and 8 deletions
@@ -0,0 +1,29 @@
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+
+const policy = JSON.parse(readFileSync("ci/runner-isolation-policy.json", "utf8"));
+const workflow = readFileSync(".gitea/workflows/p0a-ci.yml", "utf8");
+
+for (const label of policy.required_labels) assert.match(workflow, new RegExp(`\\b${label}\\b`));
+assert.match(workflow, /pnpm install --frozen-lockfile/);
+assert.match(workflow, /DADA_EXTERNAL_MODE:\s*mock/);
+assert.match(workflow, /pnpm test:all/);
+assert.match(workflow, /pnpm package:portable/);
+
+const forbiddenEnvironment = [
+  "DADA_LOCAL_DATA_ROOT",
+  "DADA_ASSET_ROOT",
+  "AI_GATEWAY_API_KEY",
+  "RESEND_API_KEY",
+  "AMAP_API_KEY",
+];
+const present = forbiddenEnvironment.filter((name) => Object.hasOwn(process.env, name));
+assert.deepEqual(present, [], `Isolated CI received forbidden environment inputs: ${present.join(", ")}`);
+
+console.log(JSON.stringify({
+  external_mode: policy.external_mode,
+  forbidden_environment_inputs: present,
+  required_labels: policy.required_labels,
+  schema_version: policy.schema_version,
+  status: "passed",
+}, null, 2));