Initial curated ITWorx_MCP_Hub source from 368fba691ea8d23403b4d56b53b5ec670d7c5020

tests/test_gitea_validation_dedup.py

@@ -0,0 +1,151 @@
+"""Regression tests for durable managed-validation deduplication."""
+
+from __future__ import annotations
+
+from uuid import UUID, uuid4
+
+import pytest
+
+from connectors.gitea import FakeGiteaServer, GiteaConnector
+from connectors.gitea.managed_validation import MANAGED_VALIDATION_WORKFLOW
+from packages.connector_kit import (
+    ConnectorContext,
+    GiteaClient,
+    GiteaError,
+    GiteaRepositoryRegistry,
+    GiteaSettings,
+    RegisteredRepository,
+    StaticTokenProvider,
+)
+
+PROJECT_ID = UUID("11111111-1111-1111-1111-111111111111")
+
+
+def _context() -> ConnectorContext:
+    return ConnectorContext(
+        workspace_id=uuid4(), project_id=PROJECT_ID, project_slug="hub", environment="test"
+    )
+
+
+def _connector(server: FakeGiteaServer) -> GiteaConnector:
+    settings = GiteaSettings(
+        base_url="http://gitea.test",
+        token_reference="docker-secret://gitea_mcp_token",  # noqa: S106
+        allow_insecure_http_for_tests=True,
+    )
+    client = GiteaClient(
+        settings,
+        StaticTokenProvider("fixture-token-must-not-leak"),
+        transport=server.transport(),
+    )
+    registry = GiteaRepositoryRegistry(
+        (
+            RegisteredRepository(
+                repository_ref="hub-repository",
+                project_id=PROJECT_ID,
+                owner="acme",
+                name="hub",
+                source_uri="itworx-git://hub/hub-repository",
+                private=True,
+            ),
+        )
+    )
+    return GiteaConnector(client, registry, write_client=client)
+
+
+def _add_validation_branch(server: FakeGiteaServer) -> None:
+    server._branches.append(
+        {"name": "codex/workflows", "commit": {"id": "e" * 40}, "protected": False}
+    )
+
+
+def test_workspace_run_reuses_validation_run_across_connector_instances() -> None:
+    fixture = FakeGiteaServer()
+    _add_validation_branch(fixture)
+    first = _connector(fixture)
+    second = _connector(fixture)
+    try:
+        dispatched = first.validation_run(_context(), "hub-repository", "codex/workflows", "full")[
+            "data"
+        ]
+        assert dispatched["dispatched"] is True
+        assert dispatched["deduplicationSource"] == "dispatch"
+
+        reused = second.workspace_run(_context(), "hub-repository", "codex/workflows", "full")[
+            "data"
+        ]
+        assert reused["id"] == dispatched["id"]
+        assert reused["dispatched"] is False
+        assert reused["reused"] is True
+        assert reused["deduplicatedRunId"] == dispatched["id"]
+        assert reused["deduplicationSource"] == "gitea-actions"
+        assert sum(path.endswith("/dispatches") for path in fixture.recorded_paths) == 1
+    finally:
+        first.client.close()
+        second.client.close()
+
+
+def test_durable_dedup_does_not_cross_validation_profiles() -> None:
+    fixture = FakeGiteaServer()
+    _add_validation_branch(fixture)
+    first = _connector(fixture)
+    second = _connector(fixture)
+    try:
+        first.validation_run(_context(), "hub-repository", "codex/workflows", "test")
+        second.validation_run(_context(), "hub-repository", "codex/workflows", "full")
+        assert sum(path.endswith("/dispatches") for path in fixture.recorded_paths) == 2
+    finally:
+        first.client.close()
+        second.client.close()
+
+
+def test_validation_history_filters_unrelated_workflows_when_identity_is_available() -> None:
+    fixture = FakeGiteaServer()
+    _add_validation_branch(fixture)
+    fixture._action_run.update(
+        {
+            "event": "workflow_dispatch",
+            "workflow_id": "unrelated.yml",
+            "head_branch": "codex/workflows",
+            "head_sha": "e" * 40,
+        }
+    )
+    connector = _connector(fixture)
+    try:
+        items = connector.validation_list(_context(), "hub-repository", "codex/workflows")["data"][
+            "items"
+        ]
+        assert items == []
+    finally:
+        connector.client.close()
+
+
+def test_explicit_unrelated_successful_workflow_cannot_authorize_merge() -> None:
+    fixture = FakeGiteaServer()
+    _add_validation_branch(fixture)
+    fixture._action_run.update(
+        {
+            "event": "workflow_dispatch",
+            "workflow_id": "unrelated.yml",
+            "head_branch": "codex/workflows",
+            "head_sha": "e" * 40,
+            "status": "completed",
+            "conclusion": "success",
+        }
+    )
+    connector = _connector(fixture)
+    try:
+        with pytest.raises(GiteaError, match="successful canonical pull_request run"):
+            connector.pull_request_merge(_context(), "hub-repository", 7, "e" * 40, "squash")
+        assert not any(path.endswith("/pulls/7/merge") for path in fixture.recorded_paths)
+    finally:
+        connector.client.close()
+
+
+def test_managed_workflow_run_name_persists_dispatch_profile_without_changing_pr_context() -> None:
+    assert (
+        "run-name: \"Managed validation / ${{ inputs.profile || 'full' }}\""
+        in MANAGED_VALIDATION_WORKFLOW
+    )
+    assert "  full:\n    name: full" in MANAGED_VALIDATION_WORKFLOW
+    assert "  pull_request:" in MANAGED_VALIDATION_WORKFLOW