Publish curated ITWorx_MCP_Hub source from 2aa63ba527a98b38b4d28f2a1bb85b1b1dbe7f6d

tests/test_compose.py

@@ -259,16 +259,43 @@ class ComposeContractTests(unittest.TestCase):
                     arguments.get("BUILD_DATE"),
                     "${APPOPS_BUILD_DATE:?APPOPS_BUILD_DATE is required}",
                 )
+                for argument, value in {
+                    "GIT_SOURCE_TREE": "${APPOPS_SOURCE_TREE:?APPOPS_SOURCE_TREE is required}",
+                    "IMAGE_VERSION": "${APPOPS_BUILD_ID:?APPOPS_BUILD_ID is required}",
+                    "SOURCE_DATE_EPOCH": "${SOURCE_DATE_EPOCH:?SOURCE_DATE_EPOCH is required}",
+                }.items():
+                    self.assertEqual(arguments.get(argument), value, name)
                 original_arguments = self.document["services"][name]["build"].get("args", {})
                 for key, value in original_arguments.items():
                     self.assertEqual(arguments.get(key), value)
 
+    def test_build_dockerfiles_emit_controller_tree_version_and_epoch_labels(self) -> None:
+        dockerfiles = (
+            "infrastructure/images/python-service/Dockerfile",
+            "infrastructure/images/docker-read-broker/Dockerfile",
+            "infrastructure/images/observability/Dockerfile",
+        )
+        expected_labels = {
+            "org.opencontainers.image.source-tree": "GIT_SOURCE_TREE",
+            "org.opencontainers.image.version": "IMAGE_VERSION",
+            "org.opencontainers.image.source-date-epoch": "SOURCE_DATE_EPOCH",
+        }
+        for relative_path in dockerfiles:
+            text = (ROOT / relative_path).read_text(encoding="utf-8")
+            with self.subTest(dockerfile=relative_path):
+                for label, argument in expected_labels.items():
+                    self.assertIn(f"ARG {argument}", text)
+                    self.assertIn(f'{label}="${{{argument}}}"', text)
+
     def test_real_autodeploy_preserves_intake_digest_and_owned_build_revision(self) -> None:
         docker = shutil.which("docker")
         if docker is None:
             self.skipTest("docker CLI is not available in this environment")
         revision = "a" * 40
         built_at = "2026-10-01T18:00:00Z"
+        source_tree = "b" * 40
+        image_version = revision[:12]
+        source_date_epoch = "1790888863"
         with tempfile.TemporaryDirectory() as secrets_dir:
             for name in self.document["secrets"]:
                 (Path(secrets_dir) / name).write_text("test-fixture-secret\n", encoding="utf-8")
@@ -301,6 +328,9 @@ class ComposeContractTests(unittest.TestCase):
                     "CONNECTOR_INGESTION_IMAGE": f"registry.example.test/intake@sha256:{'b' * 64}",
                     "GITEA_COMMIT_SHA": revision,
                     "APPOPS_BUILD_DATE": built_at,
+                    "APPOPS_SOURCE_TREE": source_tree,
+                    "APPOPS_BUILD_ID": image_version,
+                    "SOURCE_DATE_EPOCH": source_date_epoch,
                 },
             )
         self.assertEqual(completed.returncode, 0, completed.stderr)
@@ -316,6 +346,9 @@ class ComposeContractTests(unittest.TestCase):
                 continue
             self.assertEqual(service["build"]["args"]["GIT_REVISION"], revision, name)
             self.assertEqual(service["build"]["args"]["BUILD_DATE"], built_at, name)
+            self.assertEqual(service["build"]["args"]["GIT_SOURCE_TREE"], source_tree, name)
+            self.assertEqual(service["build"]["args"]["IMAGE_VERSION"], image_version, name)
+            self.assertEqual(service["build"]["args"]["SOURCE_DATE_EPOCH"], source_date_epoch, name)
             self.assertTrue(service["image"].endswith(f":{revision}"), name)
 
     def test_unraid_folder_view_groups_the_complete_production_stack(self) -> None: